National ID, registered email and password must all belong to the same officer. A one-time code is then required before the staff session is created.