The One Portal
The One Portal is a white-label client-facing web application that gives end users — MSP clients and nonprofit/church members — a branded self-service hub for interacting with their service provider or organization.
Who Uses It
| Persona | Mode | What They Do |
|---|---|---|
| MSP end client | MSP Portal | Submit support tickets, view invoices, sign policy documents, browse the service catalog, read announcements |
| MSP company admin | MSP Portal | All of the above, plus manage team members and view company-wide tickets |
| MSP technician / admin | Admin Panel (/admin) | Manage clients, configure branding, publish announcements, upload documents, build service catalog |
| Nonprofit / church member | Mission Portal | View giving history, register for events, join groups, submit prayer requests, search the member directory |
Key Capabilities
- Ticket management — Submit, track, comment on, and close support tickets; real-time status updates; direct sync with PSA
- Service catalog — Browse IT service offerings with SLA commitments; submit structured service requests
- Invoice history — View all invoices with status (draft, sent, paid, overdue, void) and line-item details
- Document center — Three-tab view: pending signatures, signed document archive, and shared files
- Policy signing — Multi-step e-sign workflow (read → acknowledge → confirm) with scroll-to-end enforcement, typed-name capture, and PDF download
- Announcements — MSP broadcasts to all clients or targeted companies; read/unread tracking
- AI chat assistant — Floating widget on every page: answers questions, suggests KB articles, creates tickets, and escalates to staff
- Mission member pages — Full giving history, event registration, small groups, prayer wall, and member directory for nonprofits and churches
- Full white-labeling — Custom portal name, logo, favicon, brand colors, welcome text, and custom CSS per MSP tenant
How It Fits in The One Stack
The One Portal connects to several other stack products:
- The One PSA — Tickets created in the Portal sync bidirectionally with PSA tickets every 5 minutes. Client users provisioned in PSA can log in via Hub SSO.
- The One Hub — Hub Bar is embedded in every page for single-sign-on access to other stack products. Hub-provisioned users log in to the Portal via a signed JWT redirect.
- The One Legal — Policy documents created in Legal can be sent to clients for signature via the Portal's signing workflow.
- The One Mission — The Portal's Mission module proxies member data (donations, events, groups, directory, prayer) from The One Mission API.
Prerequisites
| Requirement | Details |
|---|---|
| For MSP portal clients | An MSP tenant must be created in the Portal Admin. Clients are added manually or auto-provisioned from PSA. |
| For Hub SSO login | The PSA "portal access" toggle must be enabled for the contact. Requires PORTAL_CLIENT_SSO_SECRET env var. |
| For Mission portal | Access via portal.theonemission.com or portal.theonemission.app. Mission API must be configured and running. |
| For document signing | Policies must be created in The One Legal and pushed to the Portal. Requires PORTAL_API_URL and PORTAL_INTEGRATION_KEY on the Legal API. |
ℹ️
The Portal is available at app.theoneportal.app. MSPs can configure a custom domain (e.g., portal.yourcompany.com) by setting up a Cloudflare CNAME and configuring the tenant query parameter or subdomain routing.