Access is by invitation: the office issues a one-time enrollment link, and from then on you sign in with a passkey — no password to forget or leak. That ceremony arrives with the auth step.