One secure sign-in routes every person — Administrators, Clinical Staff, and Patients — to the right portal, with access enforced by role and branch on every request.
Every session resolves to a real, backend-issued identity
Role and branch scope enforced on every request, server-side
Sensitive changes are written to their own audit record