Dr Aminatou Chabi has run Pharmacie Bonne Santé in Parakou for years on paper. She wants her pharmacy in Exowpee, with herself as the person in charge. She has an email address, but no account, and she does not want to wait for anyone to create one for her. This page follows her from the first email to her first day of work. The same steps apply to any business that opens a company on Exowpee, and to the people it later brings in.

​
Start with an email address

Aminatou types her email address on the sign-up screen. Exowpee sends her a link with Start sign-up by email. A mail is sent whether or not she already has an account, and the answer on screen is the same in both cases. The link leads to sign-in if the address has an account, and to sign-up if not.

​
Create the account and the company

Aminatou follows the link and fills in her details and her pharmacy’s. Sign up with a company creates her account, her company and the organization that owns it. She becomes administrator of both. A company needs a type, a name, a currency and a fiscal status valid for its country. Exowpee also sets up the books of the company and its tax profile. If you are a business that wants a client account for your books, for example a bakery that keeps its accounts with a firm, you use Register a client account instead. It creates your account, an organization of your own and the client under it.

​
Confirm the address

Right after sign-up, Aminatou receives a verification email. She opens the link, and Verify my email confirms her address. She cannot sign in before that. If she lost the mail, or the link has expired, Resend verification email sends a new one.

​
Sign in and stay signed in

Her cashier Rachidi Yarou signs in each morning with Sign in. A person gives their email as username. An agent account gives a username and names the company, client or organization it belongs to. Behind the screen, the app keeps the session alive with Renew my session, and Sign out ends it in the evening.

​
Recover a password

One Monday Rachidi forgets his password. He asks for a link with Request a password reset, then chooses a new password with Reset my password. Aminatou, who prefers to change hers regularly, uses Change my password while signed in.

​
Join a company you were invited to

Someone who is invited to a company does not sign up with a company of their own: they follow the link of the invitation. This is covered in Invite and onboard members. Your own account and profiles are in Your account and notifications.

​
The rules

  • Starting a sign-up, requesting a reset and sending a verification again never reveal whether an address has an account: the answer is the same in every case. These actions, and sign-in, are limited to a few calls per minute (5 for sign-in, sign-up and reset requests, 6 for verification). Resetting a password has no limit of its own.
  • The sign-up link is valid for 1 day and works once. It must be used with the same email address. The email must be valid, and neither the email nor the phone number may already belong to an account, deactivated accounts included.
  • A password has at least 8 characters, with a lower case letter, an upper case letter, a digit and a symbol.
  • Sign-up with a company currently accepts only the country code BJ. The currency defaults to XOF with no decimal places when you leave it out.
  • The verification link is valid for 1 hour and works once. Opening it for an address that is already verified changes nothing. A person cannot sign in until the address is verified.
  • Wrong credentials and a deactivated account get the same refusal. An agent is also refused at sign-in when its company or client account is not active, or when its profile no longer exists. Once a company or client account is deactivated, its members are refused on their next calls too.
  • Signing in ends the previous session of the same account in the same space. Signing out ends every session of that account in that space, not only the one you used.
  • A reset link is valid for 60 minutes. Requesting a new one replaces the previous link. Resetting or changing a password ends the sessions of the person in every space, including the current one.
  • Changing a password needs the current one. It is refused for agent accounts, and nothing checks that the new password differs from the old one.
  • The sign-in type is one of user, agent, client, client_agent, organization or organization_agent. The company, client or organization identifier is required for the agent types and refused for the others.

​
All the actions of this topic

  • Sign in: Signs a user or an agent account in (company, client or organization space) and returns a session.
  • Register a client account: Creates an account, a new organization and a client account under it from an emailed sign-up token, with the person as administrator.
  • Sign up with a company: Creates a new user account and its first company from an emailed sign-up token, with the person as administrator.
  • Start sign-up by email: Sends an email with a link that leads to sign-in if the address has an account, or to sign-up if not.
  • Verify my email: Confirms an email address using the link received by email.
  • Resend verification email: Sends the email verification link again when the address has an account that is not verified. The answer is the same in every other case.
  • Request a password reset: Sends an email with a link to choose a new password when an account exists for the address. The answer is the same when no account exists.
  • Reset my password: Sets a new password using the link received by email.
  • Change my password: Lets a signed-in person set a new password after confirming the current one. All sessions of the person, including the current one, are ended.
  • Renew my session: Gives a fresh sign-in token so the person stays signed in.
  • Sign out: Ends the current session.
From other topics, also used here:
  • Accept an invitation: Lets an invited person join using the link from their invitation email. New people set up their account details; existing accounts are simply added.