Mobile · Authentication

Route /mobile/login Menu Mobile → Login & Registration

Login & Registration

Three login modes plus first-time registration flow with mandatory PIN setup and optional biometrics.

Credential, PIN, biometric, and QR registration flows for secure mobile access.

Overview

Screen layout

Flow: Splash → Login hub → first auth → PIN setup → biometric optional → Tasks hub.

Header & filters

Tabs: User Login (always), PIN (after setup), Biometric (device support + PIN setup).
QR scanner: Reads device registration payload from web-generated QR.

Summary & charts

No chart strip; this page is process-focused around authentication and registration states.

Main content & actions

Logout clears session token but preserves device registration and PIN state.

Complete feature list

Every control, panel, and workflow on this screen.

✓
Luxury UI shellEmerald-themed glass cards, sticky gradient header, module sidebar, and responsive layout.
✓
Documentation searchHeader search indexes all guide pages (docs site).
✓
Email/password loginStandard credential sign-in.
✓
SSO / OAuthEnterprise single sign-on where configured.
✓
RegistrationSelf-signup or invite flow.
✓
Biometric unlockFace ID / fingerprint after first login.
✓
Forgot passwordReset via email link.

Before you start

ℹ️

SSO users

Use corporate SSO button — local password field disabled.

⚠️

Account lock

Repeated failures lock account — reset via web or IT.

Who uses this screen

All mobile users on first launch or after logout — email/password, SSO, registration, biometric setup, and password recovery.

ℹ️

Mobile authentication

Complete first login on trusted network — SSO and MFA may require corporate connectivity.

Key concepts

Email/password login

Standard credential form matching web Tracopus accounts.

SSO / OAuth

Enterprise single sign-on button when org enables IdP.

Registration

Self-signup or invite-token flow per org policy.

Biometric unlock

Enable after first successful password login.

Forgot password

Email reset link — same backend as web Profile security.

Permissions

Role	Access on this screen
All employees	Login and biometric on issued accounts.
Contractor	Invite-only registration if self-signup disabled.
SSO-only org	Password form hidden — SSO button only.
No public access	Registration requires invite or corp email domain.

📝

Administrator override

Org administrators and service accounts configured in the Admin console may bypass row-level scopes shown above. When in doubt, confirm access with your Tracopus administrator.

Controls reference

Control	Description	Notes
Email field	Corporate email.	Autocomplete supported.
Password field	Show/hide toggle.	Keychain save iOS.
SSO button	Redirect to IdP.	Returns token to app.
Register link	Invite flow.	May be hidden.
Forgot password	Trigger reset email.	Open mail app.
Enable biometric	Post-login prompt.	Skippable once.
Error messages	Invalid creds, locked account.	Contact IT.

Common mistakes

⚠️

Saving password on jailbroken device

Corporate policy may forbid — use biometric only on managed devices.

⚠️

SSO on guest WiFi

VPN may be required — failure looks like bad password.

⚠️

Skipping biometric on personal phone

Convenience vs shoulder-surfing — enable if policy allows.

FAQ

MFA on mobile?

Supported when web MFA enabled — prompt after password or via SSO.

Session duration?

Refresh token — re-login when expired or forced logout from web.

Multiple accounts?

One account per install — logout to switch.

Biometric without password?

Must login password periodically per OS security.

Workflows

Login with credentials or QR registration.
Set mandatory 4-digit PIN.
Enable biometrics (optional).
Land on Tasks hub.

Tips & best practices

Tip: On biometric failure, users can always fall back to PIN login.

More guidance

💡

Remember