Staff and client sign-in.
We send a link that signs you in without a password. It works once and expires in an hour.
We use the domain to find your provider, then hand you to them to sign in.