Best setup later

For launch, an external portal handoff is totally fine.

When the product is ready for a more polished release, move the portal to a branded subdomain like app.tasktenant.com or portal.tasktenant.com. That keeps the marketing site clean while making the sign-in experience feel fully owned.