The address names the account, so there is nothing to pick: a school and a group are the same screen at two hostnames.
The office hands over a link and never holds a password. The same page welcomes somebody new, resets somebody who forgot, and refuses a link that has been spent.