Use the email your invitation was sent to. Access is by explicit engagement assignment, never by email domain.
Agency users are asked for a verification code after the password. Membership administration, exports and closure ask you to sign in again.