I want to add another party to the site, that can log in and do some stuff but I want it to be a separate entity (not a customer) because I don't want it to be able to make purchases and such. It would get its own "My Account" and "Dashboard" pages inside Magento, and can be managed from the backend as well.
I want this person to be able to sign in to the site and be redirected to its own account system. What is the correct approach here? Can I use Magento sessions and authentication and encryption to add this functionality or will I have to extend Customer? I would like to avoid the latter, because there's a bunch of stuff a customer has that I don't need and blocking them would be (I think) less practical than creating something new from scratch.
It occurs to me that I could also extend users in the admin panel? But I don't want to give them access to the backend, even if the role permissions are heavily restricted.