Yeah, I don't see a big problem with conflating the two.  `company_login` is just whatever unique identifier corresponds to that user in a their auth system.