KIDUART school ERP
Trust the boring part

Security & Access · part of the full platform

Authentication, MFA, sessions, roles, IP and geo controls

School data is student data, so access control is not an add-on. This is the second largest area in the platform: login and password security with MFA, email and phone verification, OAuth sign-in, password reset flows, session and token management, role and permission delegation, IP allow or block lists, geo-restriction and API key management for integrations.

How the flow runs

Security & Access in the order your school does it

Login and password security, multi-factor authentication, OAuth, verification, session and token management, role delegation, IP allow and block lists, geo restriction and API keys.

Daily sequence

4 steps in order

  1. Verify the person

    Password policy, email and phone verification and MFA establish who is signing in.

  2. Control the session

    Session listing, revocation and token handling keep access current, not permanent.

  3. Scope the permissions

    Roles and delegation decide which modules and actions each person can reach.

  4. Restrict the surface

    IP lists, geo-restriction and API keys limit where and how the system can be accessed.

Outcomes

What changes for your team

  • MFA and session control for staff accounts
  • Role-based access instead of shared logins
  • Network-level restrictions for sensitive panels

Role panels

Where you will use it

This area appears inside the panels below, each showing only what that role is allowed to see.

Modules in this area

Every module, with the capabilities schools ask about most

Open any module to see how it is structured and what your team will use daily. Security & Access connects to the rest of the platform in everyday school work.

Module 01

Login & Sign-in

Workflow groups your team opens day to day
Show capabilities

Email/Phone Verification

  • Resend VerificationResend Verification available in email/Phone Verification
  • Send Email VerificationSend email Verification to the right audience
  • Send Phone VerificationSend phone Verification to the right audience
  • Verify EmailVerify Email available in email/Phone Verification
  • Verify IdentityVerify Identity available in email/Phone Verification
  • More capabilities request the full sheet

Login, MFA, Session & Password Security

  • Change PasswordChange password when it needs updating
  • Complete WizardComplete Wizard available in login, MFA, Session & Password Security
  • Delete All SessionsRemove all Sessions when it is no longer needed
  • Delete All Sessions (Revoke All)Remove all Sessions (Revoke All) when it is no longer needed
  • Delete Profile PictureRemove profile Picture when it is no longer needed
  • More capabilities request the full sheet

OAuth/Social Login

  • Create/Submit Link GoogleCreate/Submit Link Google available in oAuth/Social Login
  • Create/Submit Link MicrosoftCreate/Submit Link Microsoft available in oAuth/Social Login
  • Remove UnlinkRemove unlink from the workflow
  • View GoogleOpen and review google
  • View Google CallbackOpen and review google Callback
  • More capabilities request the full sheet

Password Reset & Recovery

  • Change PasswordChange password when it needs updating
  • Forgot PasswordForgot Password available in password Reset & Recovery
  • Reset PasswordReset Password available in password Reset & Recovery
  • Set Password PolicySet Password Policy available in password Reset & Recovery
  • Validate PasswordValidate Password available in password Reset & Recovery
  • More capabilities request the full sheet

Universal Login, MFA & Password Security

  • Admin Create UserAdmin Create User available in universal Login, MFA & Password Security
  • Admin Get UsersAdmin Get Users available in universal Login, MFA & Password Security
  • Admin Terminate User SessionsAdmin Terminate User Sessions available in universal Login, MFA & Password Security
  • Admin Update User StatusAdmin Update User Status available in universal Login, MFA & Password Security
  • Change PasswordChange password when it needs updating
  • More capabilities request the full sheet
Module 02

Login Protection

Workflow groups your team opens day to day
Show capabilities
Module 03

Session Control

Workflow groups your team opens day to day
Show capabilities
Module 04

Security Alerts

One workflow group inside this module
Show capabilities
Module 05

API Access

One workflow group inside this module
Show capabilities
Module 06

Roles & Permissions

Workflow groups your team opens day to day
Show capabilities
Module 07

Role-Based Menus

One workflow group inside this module
Show capabilities
Module 08

Access Rules

One workflow group inside this module
Show capabilities
Full capability sheet

Want the rest of the capabilities in writing?

We publish the capabilities schools ask about most. The complete sheet with how each one behaves goes out by email so we can answer questions about your own setup alongside it.

One email with the sheet. No drip campaign.

Continue through the platform

Schools rarely buy one module. These areas connect directly to security & access in daily use.

Live demo

See security & access running on your own school data

We will set up a session with your classes, fee heads and staff structure so you can judge the fit properly.

  • 30-minute walkthrough

    Booked around your school hours

  • Run on your own data

    Your fee heads, classes and staff roles

  • No card, no lock-in

    Nothing is charged to see the product