Salesforce · Digital Experience Platform

A portal nobody uses costs more than no portal at all.

Most Experience Cloud portals are built to check a box. Partners keep registering deals by email; customers keep calling support. We map the user journey and design the permission model before any UI work — because adoption is decided there, not in the training session.

  • 60% Self-service adoption
  • 40% Less support volume
  • 6–10wk Core build
Portal to CRM Record
EXTERNAL USERS & DATA Partners & Resellers Deal registration · MDF · Assets Customers & Members Cases · Knowledge · Account view SSO & identity Salesforce CMS ERP & billing data EXPERIENCE CLOUD LAYER · TWOPIR-ARCHITECTED Permission Model External OWD · Profiles Sharing sets & rules LWR Site & UI Branded components Navigation · CMS CRM Object Map Case · Opportunity Account · Custom NATIVE TO SALESFORCE · NO SYNC LAYER TO MAINTAIN 2πr PORTAL OUTCOMES Real Adoption Users return, instead of reverting to email Deflected Volume Resolved by the portal before a ticket opens Live CRM Data Portal action lands as a record immediately
12+
Years of Salesforce delivery
500+
Clients served worldwide
98%
Client retention
40+
Certified delivery specialists

Trusted by 500+ organizations — including SaaS, legal, real estate, healthcare and fintech teams running partner and customer portals on Salesforce with Twopir Consulting.

Social Justice Collaborative
Bernstein Liebhard LLP
LegalZoom
Sterling Law Offices
Sterling Law Offices
Social Justice Collaborative
Bernstein Liebhard LLP
LegalZoom
Sterling Law Offices
Sterling Law Offices

Built for Digital Experiences

  • Salesforce Partner
  • Experience Cloud
  • LWR Sites
  • Partner Relationship Management
  • Permission Architecture
  • Salesforce CMS
  • Custom LWC
  • Agentforce
Where Portals Go Wrong

The problems we find in almost every portal audit

The platform is rarely the problem. The architecture, the permission model and the design decisions underneath it are. A portal that gets abandoned costs more than no portal — it erodes confidence without reducing the workload.

Partner portals nobody uses

The portal launched, partners got logins, and two months later channel managers are taking deal registrations by email again — because the portal takes too many clicks and does not surface what partners actually need.

Portal data that does not match Salesforce

Cases logged in the portal do not appear in Service Cloud immediately and partner updates take a day to surface. The integration or the permission model was built with shortcuts, and the one-data-model promise was never actually delivered.

Templates that look like Salesforce, not like you

A default template with a logo dropped in. Users know immediately they have left your website, and for enterprise customers or partners who work with several vendors, that reads as low investment — whether or not they consciously notice.

Permission models that are too open or too locked down

Partners can see other partners' accounts, or they can barely see their own. Getting external profiles, sharing sets, sharing rules and external org-wide defaults right is the hardest part of this platform and the one most often done wrong first time.

Content that is stale the moment it is published

Documentation, pricing and training materials are six months old because nobody owns the update process — Salesforce CMS was configured without an ownership workflow, so support keeps answering questions the portal should deflect.

An Aura site carrying years of technical debt

The site still runs on the legacy framework because migration looked risky. Page loads are slow, mobile is poor, and newer components and AI capability are out of reach — while the gap between the portal and user expectations keeps widening.

What It Is

A portal where the record is the CRM record

Salesforce Experience Cloud is Salesforce's digital experience platform — branded portals, communities and self-service sites built directly on your Salesforce data. The thing that separates it from a standalone web portal is that there is no synchronisation layer: a partner registers a deal and it is an opportunity in Sales Cloud; a customer logs a request and it is a Service Cloud case. One data model, one record, no nightly job to reconcile.

That native connection is the reason to choose it, and it is also why the permission model carries so much weight. Your portal is exposing real CRM objects to people outside your organisation, so external profiles, org-wide defaults for external users, sharing sets and sharing rules are not configuration detail — they are the security boundary. It is the most technically demanding layer of any Experience Cloud build and the one that causes the most post-launch incidents.

What Salesforce ships is a site builder. What decides whether the portal gets used is the user journey and the permission architecture underneath it — which is the work Twopir Consulting is engaged to do. Experience Cloud also sits directly on top of Service Cloud for customer portals and Sales Cloud for partner portals, and we architect those layers together — see Salesforce services.

The Framework Decision

LWR or Aura — decide this before anything else

Framework choice shapes performance, SEO, AI readiness and the cost of every future change. We make this call on your use case, not on a reflex to recommend the newer one.

LWR (Lightning Web Runtime) vs Aura for Experience Cloud
CriteriaLWRAura
Platform directionSalesforce's stated direction for new builds; where framework investment is going.Effectively in maintenance — fixes rather than new capability. No retirement date announced.
PerformanceNoticeably faster page loads; a lighter front-end architecture.Heavier runtime. Acceptable for internal audiences, more of a problem on public sites.
Public sites and SEOStructured for indexability, so a public-facing site can realistically rank.Weaker for public, search-visible sites.
Component librarySmaller standard set — more is built as custom Lightning Web Components.Broader library of ready-made community components.
AI and new featuresWhere new Agentforce and Einstein portal capability lands first.Access to newer capability is progressively more constrained.
Our recommendationMost new builds — customer portals, public sites, partner portals wanting AI.Existing sites with heavy custom Aura investment where migration cost outruns the benefit today.
Three Different Engagements

Build it, rescue it, or extend it with custom code

Three genuinely different jobs with different costs and risks. On this product the boundary matters more than most, because LWR ships a smaller standard component set — so "custom" arrives sooner here than elsewhere in Salesforce.

Engagement 01

Implement

For teams launching a portal for the first time

A new partner, customer or employee portal. We map the user journeys, design the permission model, and only then build the site — because on this platform the security architecture has to be settled before any UI work is worth doing.

  • User journey mapping per persona
  • External profile, sharing set and sharing rule design
  • LWR or Aura framework decision, with the reasoning written down
  • Site build, branding, navigation and CMS structure
  • Service Cloud and Sales Cloud object mapping
Where it stops

Delivered with standard components and configuration. Custom Lightning Web Components are common on LWR builds and are scoped explicitly — we tell you at design time which screens will need them, rather than discovering it mid-build.

Engagement 02

Rescue & Adoption

For portals that launched and never got used

The most common reason we are called. The portal is live, adoption is low, the permission model has gaps, and the CRM sync is unreliable. We audit the environment and fix the root causes rather than rebuilding by reflex.

  • Adoption audit: journey analysis and drop-off mapping
  • Permission model security review and remediation
  • Integration health check and real-time sync repair
  • Navigation and component rebuild where friction is measurable
  • Content governance and CMS ownership workflow
Where it stops

A rescue works inside your live portal, without disrupting the users who do rely on it. Most do not need a full rebuild — but where the object model or sharing architecture cannot support the audience you now serve, we say so plainly.

Engagement 03

Build On

For portals whose requirements standard components cannot meet

Custom development on the platform: bespoke components for workflows Salesforce does not ship, external data surfaced inside the portal, and Aura-to-LWC migration work where the framework decision has been made.

  • Custom Lightning Web Components for portal workflows
  • Deal registration wizards with conditional logic
  • External system data surfaced in the portal view
  • Aura to LWC component migration
  • Agentforce actions grounded on your portal content
Where it stops

Every custom component is documented so your team can maintain it without reverse-engineering the build. We will not hand back a portal that only its author can change — that is how the last one became technical debt.

What We Deliver

The portals we build, and the layers that make them work

Three portal types, and the three architectural layers underneath all of them. Each portal type needs a different permission model and object mapping — which is why "we built a portal before" is not the same as having built yours.

Partner & Channel Portal (PRM)

For channel teams that need deal registration, lead distribution and MDF management without partners duplicating data entry between their CRM and yours.

  • Deal registration workflow with approval routing
  • Lead distribution with acceptance and rejection logic
  • MDF request, approval and reconciliation
  • Partner tier management and certification tracking
  • Co-branded asset library and channel dashboards

Customer Self-Service Hub

For teams where support volume is high and customers expect to resolve routine issues, track requests and see their account without waiting in a queue.

  • Case submission with categorisation and routing
  • Knowledge article search and in-portal deflection
  • Account, contract and order dashboards
  • Agentforce first-response automation
  • Escalation to a live agent with full context carried over

Dealer, Franchise & Employee Portal

For distributed networks needing centralised access to operational data, training, compliance workflows and performance dashboards, with territory-level access control.

  • Territory-based, multi-level permission architecture
  • Compliance workflow and document collection
  • Performance dashboards from Sales Cloud or custom objects
  • Training modules and certification paths
  • Broadcast communications and event management

Permission & External Security Architecture

The layer that decides whether the portal is safe. Designed and tested against every edge case before content or UI work begins, because retrofitting it is how data exposure happens.

  • External user profile design and licence optimisation
  • Account-based isolation for multi-partner environments
  • Sharing set and sharing rule configuration
  • Component-level visibility by user type and tier
  • Security review before any external user is invited

LWR Site Build & Custom Components

Modern site builds on the Lightning Web Runtime with your brand system rather than a Salesforce template, and custom components where the standard set does not reach.

  • LWR site setup, theming and brand implementation
  • Custom LWC development for portal-specific workflows
  • Salesforce CMS setup and content governance
  • SEO structure for public-facing sites
  • Responsive layout and accessibility compliance

Agentforce & Einstein in the Portal

AI agents are first-class in portals now. Deployed with the right data access, escalation logic and conversation design — so deflection does not become a wall between the customer and a person.

  • Agentforce setup and conversation flow design
  • Knowledge article recommendation for deflection
  • AI case classification and routing
  • Personalised content by user context
  • Escalation with the full conversation handed over
Integration Architecture

Most of this is not integration — it is the same record

Inside Salesforce the portal reads and writes CRM objects directly, with no sync to maintain. Outside it, real integration work begins. Each tile says which of the two it is.

Service Cloud

A case raised in the portal is a Service Cloud case — same object, same routing, same entitlement clock. Agents see the portal history without switching context.

Native · same object, no sync

Sales Cloud

A registered deal becomes an opportunity with the partner attributed, so channel-sourced pipeline is measurable in the CRM rather than reconciled from a spreadsheet.

Native · same object, no sync

Salesforce CMS

Documentation, pricing and training content with a real ownership and review workflow — the difference between a knowledge base that deflects and one that erodes trust.

Native · governed content workflow

SSO & Identity Providers

SAML or OpenID Connect so partners and customers arrive already authenticated, plus self-registration flows where open sign-up is genuinely wanted.

IdP → portal · federated login

MuleSoft, Workato & Celigo

The real integration layer, for ERP, billing and product data that has to appear in the portal but does not live in Salesforce.

External ⇄ portal · via middleware

ERP & Billing Systems

Invoices, orders and entitlement data surfaced read-only in the account view, so customers stop opening tickets to ask questions the portal could answer.

ERP → portal · read, on page load

Slack & Microsoft Teams

Portal events — a deal registered, an escalation raised — routed to the internal channel that owns them, so nothing waits for someone to check a queue.

Portal → chat · event alerts

Marketing Cloud & HubSpot

Portal onboarding sequences and lifecycle messaging driven from real portal behaviour rather than a static list.

Portal activity → marketing · triggers

Portal onboarding and lifecycle messaging is architected alongside our Salesforce Marketing Cloud practice, and portal AI alongside Agentforce.

How We Deliver

Five phases, and a portal people actually return to

A focused portal on standard components with moderate customisation typically runs 6–10 weeks. A fully custom LWR build with bespoke design, Agentforce, complex permissions and deep integration runs 12–20 weeks.

Phase 01

Journey Mapping & Architecture

We map the journeys for every persona who will use the portal — what each one needs to do, in what order, and what currently stops them. The output is a blueprint: object model, framework choice, navigation, content structure and integration requirements, each with a stated reason.

Phase 02

Permission & Security Model

Its own phase, deliberately. External profiles, org-wide defaults for external users, sharing sets, sharing rules and component visibility — designed and then tested against every edge case before any content or UI work starts. This is what prevents the data exposure and lockout problems we are most often called in to fix.

Phase 03

Branded Build & Components

The UI is built against your brand system, not a Salesforce template. Where standard components cannot meet the design or the workflow, we build custom Lightning Web Components — and document each one so your team can change it later without reverse-engineering it.

Phase 04

CRM, Content & AI

We connect the portal to the Salesforce clouds it sits on, wire external systems through middleware where data lives outside Salesforce, set up CMS with a real ownership workflow, and deploy Agentforce where deflection genuinely helps rather than blocking the route to a person.

Phase 05

Launch & Adoption Sprint

Adoption is decided in the first 30 days. We run onboarding communications for external users, admin training for internal owners, usage monitoring to find drop-off points, and a rapid iteration cycle to remove friction before it hardens into a habit of not using the portal.

Client Outcomes

What a portal looks like when people choose to use it

Two engagements, and the numbers they moved. Each figure is scoped to the portal it was measured in — these are results from specific builds, not a promise about yours.

★★★★★
We needed a client-facing portal where law firm customers could manage their implementation — case uploads, document access, support tickets and user administration. Twopir designed the permission architecture from scratch and built the portal around the workflows our customers actually use. Adoption was 74% in the first 90 days.
Director of Client Operations US legal technology platform Legal Tech · Customer Portal
Client Engagement

US Legal Technology Platform

Customer self-service portal on Experience Cloud LWR.

74% Portal adoption in 90 days
38% Less support email volume
100% Real-time Service Cloud sync
See Legal Sector Work
★★★★★
We run a luxury real estate operation with international buyers and a distributed broker network. Twopir built our partner portal so brokers can access listings, register client interest and track deal progress — all connected to our Sales Cloud pipeline. The branded experience matters enormously in our market, and they understood that from the first review.
Head of Broker Relations Luxury real estate group · UAE Real Estate · Partner Portal
Client Engagement

UAE Luxury Real Estate Group

Broker partner portal on Experience Cloud with Sales Cloud integration.

Faster deal registration than email
65% Broker self-serve adoption
0 Data exposure incidents post-launch
See Real Estate Sector Work
Who This Is For

Four situations where this is the right conversation

The portal type differs by sector but the failure mode does not: a build that reflected the project plan rather than the user. If one of these describes you, the first call will be specific.

SaaS companies building a channel

A growing partner network that needs deal registration, materials and pipeline visibility without partners re-keying data into two CRMs — so channel managers stop being email routers. See our SaaS practice.

Regulated sectors — healthcare, legal, fintech

Portals where data isolation, confidentiality controls and an audit trail are the requirement rather than a feature. See our healthcare, legal and fintech practices.

Distributed broker and dealer networks

Agents and dealers who need listings, documentation and deal progress connected to your pipeline in real time, with territory-level access and a brand experience that carries weight. See our real estate practice.

Anyone who inherited a portal that is not working

Low adoption, a permission model you are not confident in, or an unreliable CRM sync. You need an audit and a remediation plan — and an honest answer about whether a rebuild is genuinely warranted or just easier to quote.

Why Twopir

We build from the outside in, not from Setup outwards

Most portals are built inside out: an architect configures the platform, a developer brands it, and what launches reflects the project plan more than it reflects how a partner or customer works.

Adoption is the measure, not go-live

We design around user journeys rather than platform defaults, and we run an adoption sprint after launch. A portal that is technically complete and unused has not succeeded, however cleanly the project closed.

The permission model gets its own phase

External sharing architecture is the hardest and most consequential layer here, so it is designed and edge-case tested before any UI work. That sequence is what prevents the data exposure and lockout problems we are most often called in to fix.

We argue the framework decision honestly

LWR is the strategic direction, but no Aura retirement has been announced, and a working Aura site with heavy custom investment can be the right thing to keep. You get an effort estimate and a recommendation, not a reflex upgrade.

We build the layers underneath too

A customer portal is only as good as the Service Cloud case model beneath it, and a partner portal only as good as the Sales Cloud pipeline it writes into. We architect those layers as one system rather than treating the portal as a separate project.

Custom components you can maintain

LWR needs more custom work than Aura did, so every component we build is documented for your team. Twopir Consulting has delivered Salesforce for 12+ years, and unmaintainable code is how the previous portal became technical debt.

Common Questions

Answers before the first call

Yes, it is the same product renamed. It has been Salesforce Communities, then Community Cloud, and is now Experience Cloud, so all three names still appear in older documentation and job specs. It is Salesforce's digital experience platform: branded portals, communities and self-service sites built directly on your Salesforce data. Common uses are partner portals for deal registration and lead distribution, customer self-service hubs for logging and tracking cases, and dealer or employee portals for distributed teams. The distinguishing characteristic is that it is native — a portal action creates a real CRM record rather than a copy that has to be synchronised.

Not urgently, and be sceptical of anyone who says otherwise. Salesforce has not announced a retirement date for Aura, and both runtimes were still receiving features in the Spring '26 and Summer '26 releases. What has changed is direction: Aura is effectively in maintenance, receiving fixes rather than new capability, while framework investment goes to Lightning Web Components and LWR gets new portal features first. So the real questions are whether your site is public and needs to rank in search, whether page performance is costing you adoption, and whether you want portal AI capability in the next year or two. Salesforce now ships component-level Aura-to-LWC migration tooling, which helps, but it migrates components rather than whole sites — so the effort is real. We produce a migration readiness assessment and effort estimate so the decision is made on a number.

A focused portal — a customer self-service site or partner community on standard components with moderate customisation — typically runs 6 to 10 weeks. A fully custom LWR build with bespoke branded design, Agentforce deployment, complex permission architecture and deep CRM or external integration typically runs 12 to 20 weeks. Enterprise environments with several portal types, large external user populations or multiple external system integrations extend further. The biggest single driver of timeline is the permission model: a simple single-audience portal is quick, while account-based isolation across a multi-tier partner network is not.

Usually yes, and this is our most common Experience Cloud engagement. Low adoption is almost never caused by the platform. It is caused by navigation that does not match how the user thinks, too many clicks to reach the one thing they came for, a permission model that hides data people need or exposes data they should not see, or a CRM sync they have learned not to trust. We audit the architecture, permission model, integration health, component quality and content structure, then fix the four to six root causes behind the drop-off — usually without disrupting the users who have started relying on the portal. A full rebuild is warranted only when the object or sharing model cannot represent the audience you now serve.

Configuration covers the site setup and theming, navigation, standard components, Salesforce CMS content structure, the whole external permission architecture, object and field exposure, and the CRM object mapping — which is a great deal of what a portal needs. Custom development starts when a workflow needs a screen Salesforce does not ship, such as a deal registration wizard with conditional logic or a knowledge search with taxonomy filtering, when external system data must be surfaced inside a portal page, or when an Aura component has to be rebuilt as a Lightning Web Component. This boundary arrives earlier on Experience Cloud than on most Salesforce products, because LWR ships a smaller standard component set than Aura did. We identify at design time which screens will need custom components, so it is in the scope rather than discovered halfway through the build.

Through account-based data isolation, which is designed and tested as its own phase before any UI work begins. The building blocks are external user profiles and permission sets, organisation-wide default settings for external users, sharing sets that grant access based on the user's account, sharing rules for the cases those do not cover, and component-level visibility controls for what appears on a page. Getting this right is the most technically demanding part of an Experience Cloud build and the most common source of post-launch incidents, in both directions — partners seeing another partner's pipeline, or partners locked out of their own records. We test the model against every edge case, including the awkward ones like a contact who works for two partner accounts, before a single external user is invited.

Inside Salesforce it is not really integration at all — it is direct object access. A case logged in the portal is a Service Cloud case immediately; a deal registered by a partner is a Sales Cloud opportunity immediately. There is no connector and no sync interval, which is the main architectural reason to choose Experience Cloud over a standalone portal bolted onto Salesforce by API. For systems outside Salesforce — ERP data, billing platforms, product usage or an external identity provider — we use MuleSoft, Workato, Celigo or direct REST integration depending on data volume and what middleware you already own. That external layer is designed for real-time reads where a user is waiting on the page, and for resilient asynchronous handling where they are not.

Next Step

Start with why nobody logs in, not with a redesign

We audit the Experience Cloud portal you already have — permission architecture, integration health, adoption drop-off, component quality and content structure — and hand back written findings with prioritised recommendations. If a rebuild is not warranted, that is what it will say.

Response within 24 hours · We start with diagnosis, not a sales call · Contact the team