One-time email code — no passwords.
Access is granted by HR; signing in doesn't open any door on its own.