In general, DFDs do not show the conventions as such, nor do they show the location where the process is running, or the sequence of operations. You need to see DFDs as functions that return something based on their input parameters.
The login screen is likely to be a process that reads the user credentials and returns the user ID or nothing if the user is invalid. You can see two outgoing streams in cases when you want to do something special if the user is invalid. Or it may return the reason the user is invalid (unknown user, incorrect password, account has expired). Clarifying these goals is the goal of DFD modeling, so the answers depend on your project.
In general, one must resist the temptation to add too much detail to the DFD.
source share