Finance Partner
Finance partners: medical financing requests, patient consent, loan and instalment offers, signature tracking, and disbursement.
Implementation status: requirements documented — authenticated workflows not built (blocked on backend).Intended users
Finance partner staff (credit officers and partner admins) invited to review financing requests.
Authentication & access
Invitation-based entry (FIN-00). The invite is valid for 7 days according to the existing invite contract.
Mandatory MFA for every finance role before protected portal routes.
Sign-in, password reset, lockout, and session timeout reuse the shared staff authentication flow.
Onboarding
Accept the invitation, set a password, enrol MFA, then complete first-login language, profile, and notification preferences.
Navigation & screens (Figma)
FIN-00 sign-in, MFA, password reset, lockout, invitation states, and first-login setup.
A financing request queue is shown as preview copy only. No request-queue product route exists yet.
Workflows
Valid invite → password → MFA enrolment → first-login preferences → sign-in with MFA on later visits.
Permissions boundary
Role and permissions shown on the invite are display copy. The backend remains the source of truth.
Client navigation cannot skip MFA or mark an invitation accepted.
Backend capabilities needed (no API paths in repo)
Partner staff sign-in, MFA, password reset, and invitation validation (not implemented; preview credentials only).
Financing request, offer, and disbursement APIs are outside FIN-00.
UI states to implement
Wrong credentials
Wrong MFA code
Account locked
Session timeout
Reset link expired
Invite expired, already accepted, or revoked
Acceptance criteria
Finance sign-in and invite screens use finance branding and request-queue copy.
English and Arabic, including RTL, follow the shared locale cookie.
Protected routes still require the existing staff session.