Staff and operators should use single sign-on. Clients and members should continue through the portal entry and will only see portal content after their account is recognized.
Executive, finance, operations, marketing, and all department staff should use the authenticated hub sign-in flow.
Clients, customers, and members should continue here. Department dashboards stay gated separately from portal access.