One identity model for two audiences — staff and applicants.
Staff sign in through your agency's Azure AD tenant. This gate enforces the same authorization model shown in Identity & Access — nothing renders until a role is resolved.
Role-based authorization
Privilege is the union of assigned roles (FR-04).
Field-level masking
PII is masked or hidden per role, not just page-gated.
Full audit trail
Every sign-in and override is logged for FR-08.
RFI 2026-17 demo environment · Draft
Staff sign-in
Sign in to BEC Certify
Use your Florida DOE Azure AD account.
Secured by Microsoft Entra ID. Conditional access policies apply.