Authentication
YuCommerce uses a dedicated authentication server to handle user login. Each tenant (business) has its own isolated user pool — users from one tenant cannot access another tenant’s data.
How Login Works
Section titled “How Login Works”- You navigate to your tenant’s URL (e.g.,
yourstore.yucommerce.com) - You’re redirected to a secure login page
- Enter your username and password, or sign in with Google
- On success, you’re returned to the application with an active session
Sign-In Options
Section titled “Sign-In Options”- Username and password — Standard credentials managed by your tenant admin
- Google — Sign in with your Google Workspace account (if configured for your tenant)
User Roles
Section titled “User Roles”Three roles exist within each tenant:
| Role | Description |
|---|---|
| Tenant Admin | Full access, can manage users |
| Manager | Standard access to all features |
| Staff | Standard access to all features |
Currently, all roles have the same access level. Role-based restrictions will be introduced in a future update.
Session Behavior
Section titled “Session Behavior”- Sessions are maintained via secure tokens
- You stay logged in until you explicitly sign out or your session expires
- Each browser tab shares the same session
Password Reset
Section titled “Password Reset”Use the “Forgot password” link on the login page to receive a reset email.
Limitations
Section titled “Limitations”- Users belong to exactly one tenant — no cross-tenant access
- Multi-factor authentication (MFA) is available but must be configured by your admin
- Social login providers beyond Google may be added in the future