Portal Authentication
Configure how users sign in to your feedback portal.
Portal Authentication
Control how users sign in to submit feedback, vote, and comment on your portal.
Authentication Methods
Users can sign in with:
Email (Magic Link)
Users enter their email and receive a one-time code. No password needed.
- ✓ Works for everyone
- ✓ No password to forget
- ✓ Verified email addresses
Sign in with Google account.
- ✓ One-click for Google users
- ✓ Trusted authentication
- ✓ Gets user's name and avatar
GitHub
Sign in with GitHub account.
- ✓ Great for developer products
- ✓ Gets username and avatar
- ✓ Technical audience loves it
Configuring Auth Methods
- Go to Settings → Portal
- Under Authentication, toggle methods on/off
- Changes apply immediately
Recommended Setup
| Audience | Recommended Methods |
|---|---|
| General users | Email + Google |
| Developers | Email + GitHub + Google |
| Enterprise | Email + SSO |
Open Signup vs Invite-Only
Open Signup (Default)
Anyone can create an account and participate.
Best for: Public products, community feedback.
Invite-Only
Users can only access if invited.
Best for: Beta programs, private feedback, enterprise.
To enable invite-only:
- Go to Settings → Portal
- Toggle off Open Signup
- Invite users manually
SSO (Enterprise)
For enterprise customers, configure SSO:
SAML
Connect to Okta, Azure AD, OneLogin, etc.
OIDC
Connect to any OpenID Connect provider.
See SSO Setup for configuration.
User Experience
Sign-in Flow
- User clicks "Sign In" or takes an action requiring auth
- Sign-in modal appears with available methods
- User authenticates
- User is returned to where they were
First-Time Users
On first sign-in, users:
- Authenticate with chosen method
- Confirm their name (pre-filled from OAuth if available)
- Are ready to participate
Returning Users
Returning users are recognized and signed in quickly.
Session Duration
Portal sessions last 7 days. Users stay signed in unless they:
- Sign out manually
- Clear browser data
- Go 7 days without visiting
Security Considerations
Email Verification
All authentication methods verify the user's email address.
No Passwords
Magic link authentication means no passwords to breach.
OAuth Security
Google and GitHub handle authentication securely.
Next: Custom domains