Skip to main content

Portal Custom Domains

By default, your client portal is accessible at yourcompany.theoneportal.app. You can configure a custom domain (e.g., portal.yourcompany.com) so clients access the portal under your own brand.

Prerequisites​

  • An active Portal subscription.
  • Access to your domain's DNS management.
  • Admin role in Hub.

Setup Process​

Step 1: Add the Domain in Hub​

  1. Go to Hub > Settings > Portal > Custom Domains.
  2. Click Add Domain.
  3. Enter your desired domain (e.g., portal.yourcompany.com).
  4. Click Save.

The system will generate a CNAME target for you to configure in DNS.

Step 2: Configure DNS​

Add a CNAME record with your DNS provider:

Record TypeNameTarget
CNAMEportalyour-tenant-id.portal.theonestack.com

The exact CNAME target is shown in Hub after completing Step 1. Replace portal with your chosen subdomain.

note

If you are using a root domain (e.g., portal.com instead of portal.yourcompany.com), you will need to use a DNS provider that supports CNAME flattening (such as Cloudflare). Standard DNS does not allow CNAME records on the zone apex.

Step 3: SSL Provisioning​

Once the DNS record propagates (typically 5-30 minutes), The One Stack automatically provisions an SSL certificate for your custom domain via Cloudflare.

You can check the SSL status in Hub > Settings > Portal > Custom Domains:

  • Pending — Waiting for DNS propagation.
  • Provisioning — Certificate is being issued.
  • Active — SSL certificate is live and the domain is ready.
  • Error — DNS validation failed. Verify your CNAME record is correct.

Step 4: Verify​

Visit your custom domain in a browser. You should see your client portal with a valid SSL certificate.

Branding Configuration​

Once your custom domain is active, configure branding to match:

  1. Go to Hub > Settings > Portal > Branding.
  2. Upload your company logo (recommended: SVG or PNG, minimum 200x50px).
  3. Set your primary and accent colors.
  4. Optionally upload a favicon.
  5. Click Save.

Branding applies to both the default yourcompany.theoneportal.app subdomain and any custom domains.

Managing Multiple Domains​

You can configure multiple custom domains for different use cases:

  • A primary domain for your main client portal.
  • Separate domains for white-label deployments.
  • A staging domain for testing portal changes.

Each domain gets its own SSL certificate and can be enabled or disabled independently.

Removing a Custom Domain​

  1. Go to Hub > Settings > Portal > Custom Domains.
  2. Click the domain you want to remove.
  3. Click Remove Domain.
  4. Confirm the removal.

After removal, the SSL certificate is revoked and clients will no longer be able to access the portal via that domain. The default yourcompany.theoneportal.app address remains active.

Troubleshooting​

SSL certificate not provisioning​

  • Verify the CNAME record is correct using a DNS lookup tool (e.g., dig portal.yourcompany.com CNAME).
  • Allow up to 30 minutes for DNS propagation.
  • Check that no conflicting A or AAAA records exist for the same subdomain.

Custom domain shows a certificate error​

  • The SSL certificate may have expired. Go to Hub and check the domain status.
  • Click Renew Certificate if the status shows expired.

Portal loads but branding is missing​

  • Branding settings apply to all domains. Verify branding is configured in Hub > Settings > Portal > Branding.
  • Hard-refresh the browser (Ctrl+Shift+R / Cmd+Shift+R) to clear cached styles.