Client-facing login experience explained
Client-facing login on a whitelabel domain: branded sign-in without exposing agency org admin.
On a custom domain, clients see your login chrome and then enter the workspace roles you assigned — typically Client Viewer — without org billing or Role Management.
Always test the full path: DNS → SSL → login → landing workspace → dashboards. Invite acceptance still required for new members.