Help / Customer Portal

Give a customer access to the portal

How a customer gets a portal login - there is no invitation to send; they claim it with the email on their record.

How access works

Legasum does not send portal invitations and staff do not create portal passwords. Instead, a customer claims their own login. The portal accepts a registration only when the email address typed matches the email stored on that customer's record in your company. The customer then proves they own that inbox with a one-time code sent by email.

This keeps strangers out: someone who guesses a customer's name cannot register for their invoices without access to the email on file.

Steps for staff

1. Open Customers and open the customer (or supplier, from Suppliers).
2. Check that the record has the correct email. If it is empty or wrong, edit the record and save it. You need the permission to edit customers.
3. Make sure the customer has something to see. Invoices appear only once they are posted, and documents appear only when you share them (see Share documents and files).
4. Send the customer the portal address: your Legasum address followed by /portal/ and your company address, for example https://app.legasum.com/portal/<your company address>. Your company address is the short name that appears in the web address when you open My Companies and its settings (/my-companies/<your company address>/settings).
5. Tell the customer to use Register and the same email you have on file. They finish the steps in Sign in to the customer portal.

What the customer sees

The portal is scoped to one company and to the person's own record. A customer sees their posted invoices, statement, payments, projects and the documents you shared. A supplier sees a different set (see Suppliers and service providers). Whether they also see support cases and help articles depends on your company settings (see Support cases and help articles).

Good to know

• The login is tied to the customer record. If the record is deleted, the portal login stops working at the next request.
• The email on file must match exactly, ignoring capitals. If a customer has two addresses, they must use the one on the record.
• A person who started registering but never entered the code can simply register again; the unfinished attempt is replaced.
• There is no screen yet in Legasum to deactivate a single portal login or to reset a portal password. Keep this in mind before sharing the address.
• The portal shows read-only information; customers cannot change anything in it.