Web-first
Invite acceptance and initial password setup belong here so new workforce users do not hit a desktop login screen first.
Dopal-owned workforce web app
Console is the secure front door for Operator users.
Use Console for workforce invite acceptance, first-use password setup, account and session self-service, and Operator download and recovery. Tenant ERP workflows still belong in the installed desktop Operator application.
Self-service
Console exposes current-user session visibility and revocation using the existing workforce session APIs from Dopal Auth.
Authorized
Signed-in users see the live supported release only when their current permissions allow Operator access.
What Console ownsIdentity-adjacent workforce web flows
- workforce sign-in for Console-specific access
- password reset and password rotation
- session visibility and self-revocation
- download and reinstall guidance for Operator
What stays elsewhereConsole is not a second ERP shell
- tenant workforce administration remains in Operator
- portal identities remain separate from workforce identities
- Dopal-internal support sessions stay in Operator and API-backed audit flows
- billing administration remains a Dopal-staff workflow, not a Console write surface