Account Setup & Authentication
Instructions on logging in, managing credentials, and resetting passwords.
Instant answers on user access, dual-theme customization, attendance clock-in, leave balances, client billing, SOC 2 compliance, and mobile navigation.
Instructions on logging in, managing credentials, and resetting passwords.
Understanding the Forest Dark and Sage Light design system.
How daily shifts, break tracking, and overtime calculations operate.
Resolving common connection, permission, and caching issues.
Navigate to https://erp.mintsglobal.tech/login (or http://localhost:3000/login in local development). Enter your corporate email (@mintsglobal.ae) and password.
On the login screen, click 'Forgot Password?'. Enter your registered corporate email address, and a secure password reset link will be dispatched immediately. If you do not receive it within 5 minutes, submit a ticket to IT Support.
This occurs when your Firebase authentication token expires after periods of inactivity. The ERP automatically refreshes tokens via getIdToken(true). If prompted, simply sign out and log back in to renew your cryptographic session.
Permissions follow strict Role-Based Access Control (RBAC): Founder, Core Team Lead, Department Head, Employee, and External Client. If you need access to a restricted area (e.g. Finance or Admin Audit), submit an access request to your Department Lead.
Mints ERP is engineered for SOC 2 Type I & II Common Criteria readiness and ISO/IEC 27001:2022 ISMS alignment. It includes built-in quarterly user access review workflows (CC6.1), automated sliding-window rate limiting (CC7.2), CSP/HSTS security headers, and an immutable audit log.
Temporary credentials are generated using high-entropy Web Crypto (crypto.getRandomValues), preventing weak pseudo-random patterns. Sessions are secured via cryptographically validated HttpOnly cookies.
All exported CSV reports (payroll, attendance, financial ledgers, HR records) sanitize cells automatically by prepending an apostrophe (') to any string starting with =, +, -, @, \t, or \r, neutralizing spreadsheet formula execution attacks.
The ERP features a dedicated responsive Mobile Bottom Navigation bar that docks to the bottom of the viewport, providing instant one-thumb access to the Command Center, Attendance Punch, Projects, Tickets, and Profile.
Click the Theme Toggle (Sun/Moon icon) located in the top navigation header next to your avatar. The platform immediately transitions between Signature Olive Forest Dark (#0a0e0b) and High-Contrast Sage Cream Light (#f5f7f4).
Yes. Your theme selection is automatically persisted in your browser's local storage and synchronized seamlessly across visits.
Our theme engine enforces WCAG 2.1 AA accessibility standards (html.light tokens). In Light Mode, badges and typography use deeper saturations with dark charcoal text (#182012) to ensure a contrast ratio well above 11:1 against white and sage cards.
Minor clock skew between a client machine and Google Cloud servers previously caused sub-second discrepancies. We implemented non-negative mathematical clamping (Math.max(0, ...)) across all timers and formatters, permanently preventing negative time display.
Clock in as soon as you remember. Then scroll to the bottom of /dashboard/attendance to submit a formal Attendance Correction Request with your actual start time. Your manager can verify and approve the adjustment with one click.
No. Clicking 'Start Break' pauses the live working counter and shifts into break tracking mode. Total daily hours strictly reflect net working time excluding breaks.
Planned leaves exceeding 3 days require a minimum of 14 business days notice. Short leaves (1-2 days) require at least 48 hours advance submission through the Leaves Planner.
Yes. The Leave Planner includes an interactive department calendar heatmap showing all approved and pending leaves, preventing under-staffing during peak deadlines.
Yes. All invoices generated by Mints Global ERP adhere to UAE FTA VAT requirements, including mandatory TRN formatting, bilingual Arabic/English line items, standard 5% VAT rate breakdowns, and verified HQ details.
Zero exposure. External clients authenticate into an isolated client portal restricted strictly to their assigned project milestones, handover deliverables, and invoices. Internal employee discussions, timesheets, and tickets are never exposed.
System events (shift clock-ins, leave applications, expense approvals, deal wins) automatically dispatch structured embeds to designated corporate Discord channels via secure backend webhooks.