Skip to content

User Profile Management

Feature Overview

Allows users to view and update their personal details and preferences within the platform, with changes synchronized between the local database and Auth0.

User Stories

US-UM-07: View Personal Profile with Auth0 Status

As a staffing company user, I want to view my personal profile information including my Auth0 authentication status, So that I can verify my details are correct across both systems.

Acceptance Criteria: - Given I am logged into the platform - When I navigate to my profile section - Then I should see all my personal information including: - Name - Contact information (email, phone) - Job title - Department - Profile picture (if uploaded) - Account settings - Auth0 connection status - Authentication methods enabled (password, MFA, passkey) - And the information should be displayed in a clear, organized manner - And I should see indicators if my profile information is out of sync with Auth0

US-UM-08: Update Personal Information with Auth0 Synchronization

As a staffing company user, I want to update my personal details with synchronization to Auth0, So that my information remains current and accurate across both systems.

Acceptance Criteria: - Given I am logged into the platform - When I navigate to my profile section - Then I should see an option to edit my profile - When I select edit profile - Then I should be able to modify: - First name - Last name - Phone number - Job title - Department - When I submit the changes - Then the system should: - Validate the information - Save the updated details in the local database - Synchronize relevant information with Auth0 (name, email) - Display a confirmation message - And the changes should be reflected immediately in my profile - And the changes should be reflected in Auth0 where applicable

US-UM-09: Change Email Address with Auth0 Synchronization

As a staffing company user, I want to update my email address with synchronization to Auth0, So that I can maintain access to my account if my email changes while keeping both systems in sync.

Acceptance Criteria: - Given I am logged into the platform - When I navigate to my profile section - Then I should see an option to change my email address - When I select change email - Then I should be prompted to enter my new email address and confirm it - When I submit the new email - Then the system should: - Send a verification link to the new email address - Notify me that both local and Auth0 accounts will be updated - When I click the verification link - Then: - My email address should be updated in the local database - My email address should be updated in Auth0 - My Auth0 identity should remain linked to my local account - And I should receive a confirmation notification - And subsequent communications should be sent to the new email address - And I should be able to log in with the new email address

US-UM-10: Upload Profile Picture with Auth0 Synchronization

As a staffing company user, I want to upload or change my profile picture with synchronization to Auth0, So that I can personalize my account and be easily identifiable to colleagues across both systems.

Acceptance Criteria: - Given I am logged into the platform - When I navigate to my profile section - Then I should see an option to upload or change my profile picture - When I select this option - Then I should be able to upload an image file from my device - And the system should support common image formats (JPEG, PNG, GIF) - And enforce reasonable file size limits - When I upload a valid image - Then the system should display a preview - When I confirm the selection - Then: - My profile picture should be updated in the local database - My profile picture should be synchronized with Auth0 if supported - And my profile picture should be updated throughout the platform - And I should have an option to remove or replace the picture later

US-UM-11: View Profile Change History with Auth0 Events

As a staffing company administrator, I want to view the history of profile changes for users including Auth0 authentication events, So that I can audit modifications for security and compliance purposes across both systems.

Acceptance Criteria: - Given I am logged in as a staffing company administrator - When I view a user's profile - Then I should see an option to view change history - When I select this option - Then I should see a chronological list of all changes made to the profile - And each entry should include: - Date and time of change - Field that was changed - Previous value - New value - User who made the change (self or administrator) - System where change occurred (local database, Auth0, or both) - And I should see Auth0 authentication events such as: - Password changes - MFA enrollments/changes - Failed login attempts - Successful logins - And I should be able to filter the history by date range, field type, and system - And the history should be exportable for compliance reporting

US-UM-12: Set Communication and Authentication Preferences

As a staffing company user, I want to set my communication and Auth0 authentication preferences, So that I can control how I receive notifications and how I authenticate to the platform.

Acceptance Criteria: - Given I am logged into the platform - When I navigate to my profile settings - Then I should see options for communication preferences - And I should be able to select preferences for: - Email notifications - In-app notifications - Notification frequency (immediate, daily digest, weekly digest) - Types of notifications (system updates, security alerts, etc.) - And I should see options for authentication preferences including: - Default login method (password, passkey, social login) - MFA preferences (if enabled) - Session duration preferences - When I update my preferences - Then the system should: - Save the communication selections in the local database - Update authentication preferences in Auth0 where applicable - And apply them to future communications and authentication flows - And respect mandatory notifications for critical security events - And respect mandatory authentication requirements (like MFA for admins)

As a staffing company user, I want to link additional authentication methods to my account through Auth0, So that I can choose the most convenient and secure way to access the platform.

Acceptance Criteria: - Given I am logged into the platform - When I navigate to my security settings - Then I should see options to link additional authentication methods - And these options should include: - Social logins (Google, Microsoft, etc.) - Passkeys - Additional email addresses - When I select an authentication method to add - Then I should be guided through the Auth0 flow to link that method - And upon successful linking - Then the new authentication method should be available immediately - And I should see all linked authentication methods in my profile - And I should be able to remove linked methods (except the primary method) - And all authentication activity should be logged for security purposes

Dependencies

  • User Creation and Administration feature must be implemented
  • Secure data storage for personal information
  • Email service integration for verification emails
  • Auth0 tenant setup and configuration
  • Integration between local database and Auth0