AmplifyPLATFORM
Staff sign-in
Reserved for authorized Amplify personnel. Customer accounts use the regular sign-in page. Staff emails must be on the ADMIN_EMAILS allowlist.
Why is this separate?The platform admin surface controls customer workspaces (suspension, impersonation, audit, billing). It runs on a separate authentication path: email + password via Supabase Auth, super-admin allowlist enforced server-side, and every sign-in attempt logged to the platform audit trail. MFA enrollment lands in a follow-up.