Owner login
Owners use a real email and password. Enforce MFA/AAL2 before production publish and assignment.
Student access
Students activate with a login code and one-time activation code before setting a password.
After activation, students sign in with the internal alias generated from their login code. No real student email delivery is required in this MVP.
Activate student account