Skip to main content
Open in Introw: Portal access settings

How it works

Portal access combines three controls: how partners log in, who is allowed in, and what they see. Login methods are set at the portal level and can include email magic link, social sign-in, and SSO. Access can be granted by inviting specific people or by allowing any user from a partner’s email domain. Visibility is controlled per tab by restricting it to segments. Partners can only reach the portal once it is unlocked with a subdomain or a verified custom domain, so access settings work alongside your domain setup.

Prerequisites

  • Admin access to portal and organisation settings.
  • A portal that is unlocked with a subdomain or verified custom domain.
  • Segments defined if you plan to restrict tabs by segment.

Settings & configuration

Access is configured in portal settings and on individual experiences.

Login methods

Choose how partners sign in: an email magic link for low-friction access, Google or Microsoft social sign-in, or your own SSO. You can offer more than one, except that enabling your SSO makes it the only method so access is fully governed by your identity provider. SSO is a paid add-on, configured under SSO.

Invites

Invite specific partner users to a portal. An invited user receives access to the partner portal based on their assigned experience.

Email-domain access

Allow anyone from a trusted partner’s email domain to join automatically, which lets large partner organizations self-serve access without you inviting each person.

Tab visibility by segment

On an experience, restrict a tab to one or more segments so only partners in those segments see it. A partner in any of the chosen segments sees the tab, and belonging to another, more restricted segment never hides it: visibility resolves to the most permissive of a partner’s segments. Use this to tailor the portal to different partner types.

Setup walkthrough

1

Open portal settings

2

Choose login methods

Enable the sign-in methods partners should use.
3

Set who can join

Invite specific people or allow access by email domain.
4

Restrict tabs if needed

On an experience, restrict tabs to the right segments.
5

Test access

Sign in as a test partner to confirm the experience.

How-to guides

Give a partner access to multiple portals

Let one partner contact reach more than one portal with a single login across a multi-portal program.

Invite partners and their teams

Invite specific partner contacts into a portal, then let trusted partners bring in their own teammates.

Restrict a tab to segments

Show a portal tab only to the partner segments it is meant for, so one portal serves different partner types.

Set up portal access

Choose how partners sign in, decide whether access is by invite or by email domain, and handle email verification.

Limits & gotchas

Partners can only sign in once the portal is unlocked with a subdomain or verified custom domain. A partner must have an experience assigned before an invite gives them a usable partner portal. Email-domain access grants entry to anyone with a matching address, so use it only for trusted partner domains.

Troubleshooting

  • An invited partner cannot get in - the portal is not unlocked, or they have no experience assigned.
  • A partner sees a tab they should not - the tab is not restricted to the right segments.
  • SSO is not offered at login - it has not been enabled and configured for the portal.