Use email and password. For setup, passwords can be set directly in Supabase Authentication.
If login fails even with the right password, open the user in Supabase Authentication and set/update the password there.
Access is determined by your role: staff, supervision officers, and clients are each routed to the right workspace after sign-in.