> ## Documentation Index
> Fetch the complete documentation index at: https://docs.introw.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Portal Access

> Set partner login methods, enable SSO, invite partners, and control tab visibility by segment in Introw.

**Open in Introw:** [Portal access settings](https://app.introw.io/settings/portal)

## How it works

Portal access combines three controls: how partners log in, who is allowed in, and what they
see. Login methods are set at the portal level and can include email magic link, social
sign-in, and SSO. Access can be granted by inviting specific people or by allowing any user
from a partner's email domain. Visibility is controlled per tab by restricting it to segments.

Partners can only reach the portal once it is unlocked with a subdomain or a verified custom
domain, so access settings work alongside your domain setup.

## Prerequisites

* Admin access to portal and organisation settings.
* A portal that is unlocked with a subdomain or verified custom domain.
* Segments defined if you plan to restrict tabs by segment.

## Settings & configuration

Access is configured in portal settings and on individual experiences.

### Login methods

Choose how partners sign in: an email magic link for low-friction access, Google or Microsoft
social sign-in, or your own SSO. You can offer more than one, except that enabling your SSO
makes it the only method so access is fully governed by your identity provider. SSO is a paid
add-on, configured under [SSO](/features/access/sso).

### Invites

Invite specific partner users to a portal. An invited user receives access to the partner portal
based on their assigned experience.

### Email-domain access

Allow anyone from a trusted partner's email domain to join automatically, which lets large
partner organizations self-serve access without you inviting each person.

### Tab visibility by segment

On an experience, restrict a tab to one or more segments so only partners in those segments see
it. A partner in any of the chosen segments sees the tab, and belonging to another, more
restricted segment never hides it: visibility resolves to the most permissive of a partner's
segments. Use this to tailor the portal to different partner types.

## Setup walkthrough

<Steps>
  <Step title="Open portal settings">
    Go to [Portal access settings](https://app.introw.io/settings/portal).
  </Step>

  <Step title="Choose login methods">
    Enable the sign-in methods partners should use.
  </Step>

  <Step title="Set who can join">
    Invite specific people or allow access by email domain.
  </Step>

  <Step title="Restrict tabs if needed">
    On an experience, restrict tabs to the right segments.
  </Step>

  <Step title="Test access">
    Sign in as a test partner to confirm the experience.
  </Step>
</Steps>

## How-to guides

<CardGroup cols={2}>
  <Card title="Give a partner access to multiple portals" icon="book-open" href="/features/portal/portal-access/guides/give-access-to-multiple-portals">
    Let one partner contact reach more than one portal with a single login across a multi-portal program.
  </Card>

  <Card title="Invite partners and their teams" icon="book-open" href="/features/portal/portal-access/guides/invite-partners-and-their-teams">
    Invite specific partner contacts into a portal, then let trusted partners bring in their own teammates.
  </Card>

  <Card title="Restrict a tab to segments" icon="book-open" href="/features/portal/portal-access/guides/restrict-a-tab-to-segments">
    Show a portal tab only to the partner segments it is meant for, so one portal serves different partner types.
  </Card>

  <Card title="Set up portal access" icon="book-open" href="/features/portal/portal-access/guides/set-up-portal-access">
    Choose how partners sign in, decide whether access is by invite or by email domain, and handle email verification.
  </Card>
</CardGroup>

## Limits & gotchas

<Warning>
  Partners can only sign in once the portal is unlocked with a subdomain or verified custom domain. A partner must have an experience assigned before an invite gives them a usable partner portal. Email-domain access grants entry to anyone with a matching address, so use it only for trusted partner domains.
</Warning>

## Troubleshooting

* **An invited partner cannot get in** - the portal is not unlocked, or they have no experience assigned.
* **A partner sees a tab they should not** - the tab is not restricted to the right segments.
* **SSO is not offered at login** - it has not been enabled and configured for the portal.