Skip to main content

​
Real-World Example

A YouNegotiate operations user opens the Super Admin login page and signs in with their Super Admin credentials. After login, they should reach the Super Admin portal, not the Creditor or EcoMail Hub / EcoPortal.

​
Visual Flow

​
How It Should Work

  • It should authenticate only Super Admin users.
  • It should redirect logged-in Super Admin users into the Super Admin portal.
  • It should keep Super Admin sessions separate from creditor and EcoMail Hub / EcoPortal sessions.

​
How It Should Not Work

  • It should not allow creditor users to access Super Admin areas.
  • It should not reveal whether sensitive platform accounts exist through detailed login errors.
  • It should not redirect a Super Admin user into the wrong portal.

​
Developer Notes

  • Use the Super Admin guard for this flow.
  • Redirect behavior should not reuse creditor-only assumptions.
  • routes/superadmin/auth.php
  • app/Livewire/SuperAdmin/Auth/LoginPage.php
Last modified on May 26, 2026