Thanks a lot @dasniko I think this will work.
Quick question too - is there any way to avoid requiring the user to log in? Can a similar link be used to direct the user to the Reset (Forgot) Password flow, without them having to authenticate again, or see the login page at all?