External Portal for governed external access

Feature Request: External Portal

Summary:
Deliver a separately deployed, fully brandable External Portal that provides externally invited users (auditors, customer reviewers, partners) with scoped, view-only access to Management Pro documents. Each customer organization operates its own portal instance with independent branding, access code issuance, sponsor approval policy, authentication policy, and external user pool, all governed by the same access tag model and audit trail as the internal application.

Problem Statement:
Organizations frequently need to share documents with external stakeholders, but existing approaches—ad hoc email attachments, unmanaged file shares, or customer-specific SharePoint workarounds—are hard to govern and audit. These methods lack consistent access tagging, centralized revocation, and unified logging, creating security and compliance gaps and making it difficult to demonstrate controlled external access during audits.

Proposed Solution:
Provide a separately deployed External Portal application for each Management Pro customer organization, allowing full branding control (logo, colors, copy, domain presentation).
Allow external users to sign up using access codes that encode both access tags and specific portfolio items they may view.
Support single-use or reusable codes with optional expiration dates and revocation capability, plus a “Request Access Code” flow for prospective users.
Offer configurable sponsor approval for new sign-ups on a per-organization basis.
Make the portal view-only at first release: external users can browse, preview, and download documents (including zip exports with cover pages), but cannot upload or modify content.
Provide per-organization configuration of authentication policy, including MFA requirements, password policy, account lockout thresholds, session duration, and idle timeouts.
Apply the same access tag model used in the internal application so that portfolio item assignment and access tags independently govern what external users see.
Log all portal activity (logins, views, previews, downloads, exports, and code usage) into the same unified audit trail as internal user actions, preserving auditability even after an external user is removed.

Benefits:
Provides a secure, governed alternative to ad hoc external document sharing methods.
Improves compliance posture by unifying internal and external access under the same tag model and audit trail.
Gives organizations control over branding and authentication policies, aligning external access with their security and UX standards.
Reduces administrative overhead with code-based access issuance and revocation, including support for sponsor approval and user-initiated access requests.
Supports auditors, customers, and partners with a streamlined, read-only experience that does not require direct access to internal Management Pro.