One login for customers and admins.
Admin controls which login methods are active. The same login page sends users to the website and admins to CRM.
Admin login and customer login use this same page. Redirect is automatic after login.