Getting access
Portal access is invitation-only and always tied to one customer account. The first half of this page is for the operator managing invitations; the second half is for the customer registering and signing in.
Inviting a portal user (operator)
Roles: No owner/admin role is needed — any team member whose customer data scope includes this customer can invite and revoke portal users.
- Open Customers in the sidebar and click the customer.
- Scroll to the Portal access section of the profile.
- Enter the contact’s email under Invite by email — and optionally their Name (optional).
- Click Send invitation. A toast confirms “Invitation sent to …”, and the contact appears in
the list with an
INVITEDpill.
Screen: The Portal access section on a customer profile. Existing portal users are listed with their email, a status pill (
INVITEDin amber,ACTIVEin green), and a note like “invited Jun 12” or “last in Jul 2”, each with a Revoke button. Below the list, the Invite by email and Name (optional) fields with a Send invitation button.
What the contact receives: a branded email with the subject “Your <your company> customer portal invitation” and a Set up your account button. The link expires in 7 days.
- Re-sending: if the contact hasn’t registered yet, invite the same email again — the old link stops working and a fresh 7-day link is sent.
- Already active: inviting an email that already has portal access is rejected with “This contact already has portal access.”
- The same email can hold portal accounts with different customers, but within one customer an email maps to exactly one portal user.
Revoking access (operator)
Click Revoke next to the user in the Portal access list. Access ends immediately: the person can no longer sign in and any pending invitation link is destroyed. To restore access later, simply send a new invitation.
Revoking is immediate and there is no “suspended” middle state in the console — the entry disappears from the list. If you only need to rotate a compromised password, ask the user to use Forgot your password? instead.
Registering from an invitation (customer)
- Open the invitation email and click Set up your account.
- The registration page shows your Email already filled in and locked — the invitation is tied to it.
- Enter Your name, an optional Phone (optional), and a Password of at least 8 characters, then confirm it.
- Click Create account. You are signed in immediately and land on the portal home.
If the page says “Invitation expired” or “This invitation link is invalid or has expired”, ask your contact at the shop to send a new invitation — expired links cannot be revived.
Signing in (customer)
Your sign-in page lives at /portal/login on the shop’s APEX address. When you arrive from an
invitation or a previous visit, the page already knows which portal you belong to and greets you
with the shop’s name and logo. Opening the plain sign-in page instead shows an extra Portal
code field — that code is the short workspace name in your invitation link (the org= part);
your shop contact can tell you what it is.
- Enter your Email and Password.
- Click Sign in. You land on the portal home.
A wrong email or password always answers “Invalid email or password.” After 5 failed attempts the account locks for 15 minutes — the message does not change, so wait and try again, or reset the password.
Forgot / reset password (customer)
- On the sign-in page, click Forgot your password?.
- Enter your Email and click Send reset link. The confirmation appears whether or not the address has an account — check your inbox.
- Open the email and follow the link; it is valid for 1 hour.
- Choose a new password (at least 8 characters, confirmed twice) and click Reset password, then Go to sign in.
Open the forgot-password page from your portal’s sign-in link. If the page doesn’t know which portal you belong to, it asks you to return via that link before it can send anything.
Signed-in users can also change their password without email — see Account & invoices.