Staff sign in
Your email address and the password an owner set for you. Nothing is emailed and there is nothing to wait for.
A password on its own is not enough for the parts of the portal that move money or appoint staff. Those permissions are marked requires_mfa and the database withholds them until an authenticator has been set up and used on the current session — so a stolen password buys a session that can read, not one that can act. You will be taken to set that up if you have not yet. That matters more than it did: a password is now the only credential, so the second factor is the only thing standing behind it.
Not staff? Sign in the usual way.
