Staff sign in
This is the way into /manage/*. It is separate from the player sign in — same browser, two different account systems, and no shared session.
Staff area — every access is logged
Every sign in, every failed sign in and every action inside the admin area is recorded with the account, the time and the network address. These logs exist for the funder's audit and cannot be deleted from the interface. If you have arrived here by mistake, close the page.
Staff account
Only addresses issued by the system admin. Personal addresses are not accepted, and there is no social sign in.
Forgotten your password? · The confirmation screen there does not reveal whether an address exists.
There is no “skip this step” option and no “remember this device for 30 days”. An account with two-factor turned off is blocked right here, and the system admin is alerted.
There is no self-service sign up
This page has no “Create account” button, no invite link for colleagues and no access request form. Staff accounts are created one way only: the system admin creates them, and granting access needs a second person to approve.
An account's life runs created by the system admin → active → revoked. No branch of that starts with the user.
- No list of roles to choose from — your role comes from your account after you authenticate.
- No hint about which addresses exist. A wrong email and a wrong password give the same message.
- No organisation names, staff names, or paths to the pages inside.
- No count of remaining attempts — the account simply locks for a while past the limit.
The less a screen says before you are authenticated, the less there is to probe.
Access is resolved only after sign-in
The server sends a successfully authenticated account to its authorised start page. No role catalogue, internal route map or destination picker is exposed here, and an account cannot alter its own permissions.
Cannot sign in? Use the internal channel you were given when your account was issued. There is no request form on this page, because a form like that becomes a way for outsiders to work out which addresses are real.