Portal access and roles

Portal access is per-contact, per-account. Each contact gets a role that controls what they can see and do.

Roles

• Viewer — read-only: tracking, documents, statements.
• Booker — everything Viewer can, plus create bookings on published rate cards.
• Approver — can acknowledge / e-sign documents (arrival notices, PODs).
• Billing — sees invoices and statements; can download and (if configured) pay online.
• Admin — can manage other contacts' portal access at the same account.

A contact can have multiple roles.

Invitation

From the account page → contact → Invite to portal. Contact receives an email with a magic link → sets password → optional MFA enrolment.

Bulk invite: select multiple contacts, invite all at once.

Scoping

Access scopes are evaluated per resource:

• A contact sees shipments where their account is bill-to / shipper / consignee (configurable).
• Billing contacts see invoices of their bill-to scope.
• Group accounts (parent-child) can see child-entity data if the parent role allows.

Deactivating

Contacts who leave can be deactivated by the customer's Admin contact or by your ops:

• Soft deactivate — access revoked, history retained.
• Hard remove — access revoked, contact archived.

MFA

Per-tenant policy:

• Optional (default).
• Required for billing / admin roles.
• Required for all portal users (high-security tenants).

SSO

Enterprise customers can set up SSO (SAML / OIDC). One IdP configured per account; all their contacts sign in through it.

Password policy

Configurable at tenant level: length, complexity, rotation, breach-checked passwords. Defaults align with NIST SP 800-63B.

Audit

All portal logins, actions (book, acknowledge, download) are audit-logged. Visible to account admins + your compliance team.

Time-limited guest links

Some tenants issue temporary link-only access (signed URL, 72-hour expiry) for ad-hoc sharing with non-registered parties. Use sparingly.