Control plane sign-in
Sign in with the single local admin account seeded into this service, then manage tenants and clients from one server-rendered console.
Admin account
The first local admin account is seeded from ADMIN_EMAIL and ADMIN_PASSWORD, then persisted in DynamoDB so the password can be changed later.