The platform core: single sign-on, employee profiles and access
I design MyCore — the core of the MyLink platform. Sign-up and single sign-on, the employee profile, the directory and roles: everything the group's other products take as a given and reuse instead of building their own.
Overview
- Product designer — from discovery to release
- A shared core for the group's products: single sign-on, employee profiles and access rights
- Research, information architecture, UI/UX design, prototyping, release support
- 2025 — present
Problem
Sign-in was confusing, permissions were scattered across the group's products, and the home screen drowned in widgets.
Every product in the group kept its own employee list and its own sign-in, even though Core already existed. The same person existed in several systems in different versions and registered again in each of them, and a data fix had to be repeated by hand everywhere. Access rights lived in the same places — next to the data, without a shared language: the only way to answer “what does this employee see across the group's products” was to walk through every system one by one.
The sign-in flow inside Core itself was unstable: some scenarios broke on the transition between sign-in and sign-up — an employee couldn't move from the login form to registration and back. A separate difficulty was factory floor staff and candidates: parts of the functionality were simply unclear to them, and the interface didn't explain what to do next.
The home screen was overloaded with widgets — with no priorities and no sense of what an employee actually needed every day.
Approach
From the data model to the home screen — one shared core that everything else stands on.
- – Reduced employee, company and position to a single definition that every product references, instead of copies in each of them.
- – Designed sign-in as two short steps with visible progress — registration by phone or email, then a confirmation code. From there the same account opens every product in the group, with no separate sign-up in each.
- – Rebuilt the sign-in flow itself: made the transition between sign-in and sign-up two-way — the forms used to be dead ends, and an employee couldn't get back from one to the other.
- – Rewrote the screens for factory floor staff and candidates separately from the admin ones — simplified the wording and removed steps that assumed the person already knew the system.
- – Tested the prototype of the new auth flow with factory workers before release, not after — to catch comprehension problems before they reached production.
- – Hid personal data in the profile by default and wired some fields to refresh from eGov — so they aren't typed by hand and don't drift from the paperwork.
- – Described permissions as roles at the core level, so a product inherits access instead of inventing its own model.
- – Rebuilt the home screen: instead of an unprioritized pile of widgets, kept what an employee uses every day and moved the rest one click away.
- – Built the module on the shared MyLink design system components — admin screens look and behave the same across the group's products.
Single sign-on
One account for every product in the group: two steps to a verified number — and the person never registers anywhere again.
Sign-up in two steps
An account is created by phone number or email — whichever suits. The steps sit on the left so people can see how much is left from the start, and support contacts stay on the screen rather than in a help page.
Verification without a dead end
A six-digit code, the masked number to check against, a resend timer and a way back to the previous step in case the number was mistyped. The completed step is ticked off so progress stays visible.
Profile and directory
One employee — one record: data is entered once and reused by the group's products instead of being copied into each of them.
A profile that fills itself from eGov
Sections run from personal data and military registration to bank details, roles and documents. Personal fields are hidden by default and revealed on click, and some data is pulled from eGov so it isn't typed by hand or left drifting from the paperwork.
Qualifications and experience in the same record
Total tenure, past employers with periods, responsibilities and a manager's contact — the data recruiting and internal transfers rely on lives in the person's profile, not in a separate database.
A directory that shows everyone's stage
Tabs split people by stage: current, onboarding, dismissed, blocked. Each row carries the department, tenure and current status — active, on labour or social leave, travelling. Contacts are masked and open on click.
Outcomes
- – Redesigned the sign-in flow and tested it with factory workers — 23 respondents, all completed it without critical issues.
- – Single sign-on and the employee profile now work across every product in the group — instead of parallel lists and re-registering in each one.
- – Permissions are clear and predictable: you can see what each role opens.
- – Updated the design of the home page and profile within the same core.
