User Story
As a Business User, GCC National, or International Investor (non-resident), I want to select the "Other" tab on the login screen so that I can authenticate using my unique User ID (such as a SAGIA License or GCC ID) instead of a National ID.
📝 Observation (Sticky Note)
Tab Behavior: This tab is the alternative to "Citizen/Resident." When active, the background should turn Green (as shown) to indicate the current selection clearly.Input Validation: The "User ID" field must be flexible. It is not restricted to a standard 10-digit National ID; it must accept alphanumeric formats corresponding to SAGIA Licenses or GCC National IDs.Helper Text: It is critical to keep the instructional note visible below the form: "Note: Client ID Could be SAGIA License Number or GCC National ID" to reduce user error during data entry.Field Masking: The "Password" field must include the "Show/Hide" (eye icon) toggle for accessibility and usability.
User Story
As a Business User or GCC National, I want to recover my password using my registered User ID (SAGIA/GCC ID) so that I can regain access to my account via email or SMS verification without needing a National ID.
📝 Observation (Sticky Note)
Process Distinction: Unlike the "Citizen/Resident" flow (which likely uses Nafath/Absher), this flow must rely on standard OTP verification sent to the registered email or mobile number on file.Input Step: The first screen of the recovery flow should only ask for the User ID to verify the account exists before sending the OTP.Security Masking: When displaying the destination for the OTP (e.g., "Enter the code sent to m******@company.com"), partially mask the email or phone number for security.Error Handling: If the User ID is invalid, show a generic "User ID not found or invalid" message to prevent account enumeration.
ID Format Validation:What is the exact input mask/format for International Investor IDs and GCC IDs? (e.g., Are they purely numeric or alphanumeric? Is there a fixed character length like 10 or 15 digits?)OTP Delivery Channel:How does this user receive the OTP?Phone: If SMS, does the system support International Country Codes for non-residents?Email: Is email the fallback or primary method for International Investors who may not have a Saudi mobile number?
User Story
As a user, I want to enter the One-Time Password (OTP) sent to my registered contact methods in a pop-up window so that I can securely verify my identity and proceed to reset my password.