Magic Link Invitations

Magic links provide vendors with secure, passwordless access to the Vendor Portal. No account creation, no passwords to remember.

Sending a Magic Link

1. Open a record in any project.
2. Click Invite to Portal (or use the three-dot menu and select Send Portal Invite).
3. Confirm the vendor's email address — it defaults to the email on file for the vendor.
4. Click Send.

The vendor receives an email from ask@askinori.com with a unique link to the portal.

How Magic Links Work

Each magic link is:

• Unique to the vendor and record — It opens the portal pre-loaded with the correct project and requirements.
• Time-limited — Links expire after 30 days. After expiration, you can resend a new link.
• Single-vendor scoped — The link only grants access to that specific vendor's records. They cannot see other vendors or browse the organization.

Resending and Revoking

Resend

If a vendor did not receive or lost the email:

1. Open the record.
2. Click the three-dot menu and select Resend Portal Invite.

This generates a new magic link and invalidates the previous one.

Revoke

To remove a vendor's portal access:

1. Open the record.
2. Click the three-dot menu and select Revoke Portal Access.

The existing link stops working immediately. The vendor sees an "Access Revoked" message if they try to use it.

Security

Magic links use cryptographically secure tokens. They do not contain any sensitive data in the URL itself. All portal sessions are encrypted via HTTPS and automatically expire after 4 hours of inactivity.