Client Portal: One-Time Password (OTP) fallback for expired magic links

Expired Client Portal magic links no longer leave contacts at a dead end. When a contact opens an expired magic link, they are automatically taken to the One Time Password (OTP) verification screen instead of seeing an error or needing to regenerate the link.

An OTP is sent to the contact's email address, which is masked on the verification screen for privacy. The contact enters the OTP to complete login and regain access on their own, without requesting a new magic link or contacting an admin. No setup is required - the fallback is automatically enabled for Client Portal magic link authentication.

See Managing Portal Access for how administrators control Client Portal access.