Our web app allows our customers to invite their collaborators into their account. They can submit the new user's email address, and our app sends the new user an email inviting them to login. Once logged in, the new user can view and edit our customer's data.
How should we invite these new users to authenticate? Some options...
- A temporary password (ex: Login at myapp.com! Your password is 'bobcat5123')
- A link to a special one-time login url (ex: Login at myapp.com/login?token=fx4c23n89x)
- Other ideas?
I prefer the one-time login, but I'd like to hear your reasoning :)