Appearance and protection
Appearance
The portal uses the brand of its unit: logo, colours, font and links (see Brands). On Appearance:
| Setting | Choices |
|---|---|
| Header | Behind the headline and search. Soft (the default) is a light wash of the brand colour, Brand colour fills it with the primary colour (with the brand's dark-background logo when the text is white), and Plain is white. |
| Forms | Cards in a grid, or a List with one card per category. |
| Corners | Sharp, Soft or Round, for cards, fields and buttons, including the form. |
| Primary colour and Accent colour | This portal's own colours. Use the brand's colours removes them. The accent colours the icons, links and focus rings. |
Protection
Portals are protected like a form in browser mode, and submissions must come from the portal page itself.
| Setting | What it does | At first |
|---|---|---|
| Cloudflare Turnstile | An invisible bot check. It needs the Turnstile keys under Settings → Installation (Bot protection). | On |
| Honeypot field | A hidden field that bots fill in. | On |
| Minimum fill time | Requests sent faster than this many seconds are treated as bots. | 2 seconds |
| Requests per address and Per window of | How many requests one IP address may send in a window of seconds. | 10 per 600 seconds |
Unlike forms, portals have no hourly cap.
[!WARNING] Without the Turnstile keys, every request to a portal with the check turned on is refused.
Who may send requests
The Who can submit and Portal sign-in settings of a unit, under Organization, decide who may use its portals. They're read for the unit a form sends cases to.
| Setting | Choice | What it does |
|---|---|---|
| Who can submit | Anyone | Any email address can send a request. |
| Known contacts only | Refuses people who aren't on an account or registered by your team. | |
| Known contacts; hold others for review | Takes their request but holds it under Held for review in the inbox until an agent accepts it. | |
| Portal sign-in | Optional | Contacts can sign in to see their requests, but they don't have to. |
| Required | Shows "Sign in to send a request." instead of the form until they sign in. |
See Forms for the details, which are the same.