Credential handoff remains out of band and outside this app. Support creates local tenant users, stores only scrypt password hashes, and shares initial passwords through the approved support channel.