Probably a lot of ways to do that.
You could just build the usual onboarding process, and manually encode every single email adress, as there are only 20.
Then, if necessary, you let your users the possibility to reset their password with the email+token way.
Michel