Staff phones reach the app through this HTTPS address (see README → Tailscale Funnel). Fingerprint sign-in only works on this address, or on localhost on this PC.
Send this link to the employee (WhatsApp or email) or let them scan the QR with their own phone. It works once and expires in 7 days.