Security & compliance
Authentication flows
Password and magic-link sign-in, must-change-password for enrolled students, and persona redirects.
Security & compliance guide for day and boarding schools.
Last updated July 24, 2026
Schoolyi supports credential-based authentication with five sign-in personas. Parents and students may additionally use passwordless magic-link email (userType parent/student or Parent/Student role). Staff, teachers, and vendors use password only.
| Flow | Path | Audience |
|---|---|---|
| Sign in | /signin | All users - five role tabs |
| Sign up | /signup | Self-registration where enabled |
| Email verify | /verify | New accounts - confirm email |
| Forgot password | /forgot-password | Request reset link |
| Reset password | /reset-password | Set new password from token |
| Magic link | /signin (email link) | Parent and student only - 15 min expiry |
Must-change password
Accounts created with mustChangePassword=true cannot use the rest of the app until they set a new password at /profile. Enrollment creates student portal users with this flag; admin-created users, bulk imports, and staff onboarding from careers follow the same pattern. After a successful change, the flag is cleared.
Product docs access
- /docs is public - anyone can read setup guides and workflows without signing in
- While signed in, open documentation anytime from the header Docs icon → /docs
Common questions
Quick answers in plain language.
What is student data privacy schools?+
Password and magic-link sign-in, must-change-password for enrolled students, and persona redirects. This is a core topic in Security & compliance on Schoolyi.
How do I set up authentication flows in school management software?+
Follow the steps in this guide during authentication, rbac, and data handling. Start with getting-started docs if you are new to Schoolyi, then apply the workflows here for your school year.
How does Schoolyi handle authentication?+
Password and magic-link sign-in, must-change-password for enrolled students, and persona redirects.
Is there a student data privacy schools guide for school administrators?+
Yes. This article is part of the public Security & compliance documentation at /docs - written for administrators, operators, and IT teams.
Who manages authentication flows at a typical K-12 school?+
Usually security & compliance and front-office staff responsible for student data privacy schools. Teachers and finance may have scoped access depending on your role configuration.
Does Schoolyi support school software security?+
Yes. Schoolyi is a cloud school management system (SMS) with connected modules on one student roster and academic calendar. See related guides below or contact us for a demo focused on student data privacy schools.
Related searches
School leaders and IT teams often search for: how to authentication in school management software, best student data privacy schools for K-12 schools, Schoolyi authentication guide, school software security, FERPA compliant school software, and school data protection.