I've had a few customers like that. What I eventually did was make it possible for them to be logged in automatically by visiting a unique URL. Horribly insecure, but it's not a service that needs high security.