Build a customer portal on your ERP or CRM so customers see orders and documents while the data stays in AFAS, Exact, SAP or Dynamics. Buy a portal product if it covers your process; build custom when it spans systems.
A customer portal lets your customers check their own orders, deliveries, invoices and documents and file requests without calling or emailing. For an IT department the question is not whether that is possible. It is where the data lives, who manages the sign-in and who will still support the portal three years from now. This page answers those three questions.
Last updated: 29 October 2026
A good customer portal is a window onto your existing systems, not a second database. Orders, stock, contracts and invoices stay in AFAS, Exact, SAP Business One, Dynamics 365 or Salesforce, and the portal reads and writes through their own APIs. Customers sign in through Microsoft Entra ID or their own company account, with roles per contact person. We add AI only where it changes the outcome: questions the portal cannot answer on its own, and search across documents. We build it alongside your IT partner, who then runs it in your own environment.
| Option | Fits when | Falls short when |
|---|---|---|
| AFAS OutSite | Your customer data lives in AFAS Profit and customers mainly view and change their details and exchange documents. OutSite is fully integrated with Profit. | The process also needs data from a WMS, a TMS or a second ledger. |
| Microsoft Power Pages | You run Dynamics 365 apps on Dataverse. Power Pages builds low-code external websites on the same Dataverse data. | Most of your data sits outside Dataverse, or the portal logic hits the limits of low-code. |
| Salesforce Experience Cloud | Your service and customer data lives in Salesforce and customers should resolve service questions on their own. | Orders and invoices sit in an ERP that Salesforce does not know about, so you still need an integration. |
| Custom build | Customers work across several systems, or the portal must do something no product does, such as your own workflow or AI on your documents. | Nobody ends up owning the code. That is why handover and documentation belong in the scope. |
| SimplyBoost (our own product) | You mainly want to answer general questions from your website, PDFs, FAQ and catalogue on website chat, WhatsApp and Instagram. | The answer has to come from one signed-in customer's order data. That is a custom build. |
For consumers and business customers, Microsoft Entra External ID offers a separate external tenant, kept apart from your employees: sign-in with email and password, a one-time passcode or a Google or Facebook account, with multifactor authentication by email or SMS. Partners who want to use their own company account are invited through B2B collaboration and authenticate with their home organisation. Azure AD B2C has not been sold to new customers since 1 May 2025, so a new portal starts on External ID.
Sign-in is half the job. The other half is authorisation: every request checks on the server whether this contact person may see this customer account, this order or this document. OWASP ASVS 5.0 is a useful checklist for those controls and for the security test before go-live. Anyone processing personal data on your behalf records that in a processor agreement under Article 28 GDPR.
| Area | Your IT team or IT partner | Crux Digits |
|---|---|---|
| Hosting and environment | Runs the portal in your own cloud environment, with backups and patches. | Delivers the application with documentation and a runbook for installation. |
| Identity | Manages the Entra tenant, the multifactor policy and who gets access. | Connects the portal to that tenant and builds the roles per customer and contact person. |
| ERP and CRM access | Provides an API user with minimal rights and a test company. | Builds and tests the integration, including error handling and limits. |
| Change process | Approves releases through your change process and DTAP pipeline. | Delivers a changelog, test results and a rollback plan with every release. |
| After go-live | Monitoring, incidents and first-line questions. | Hands over code, prompts, test set and documentation; further development after that as a separate assignment. |
| Step | What you get | Duration | Price (excl. VAT) |
|---|---|---|---|
| AI audit | Processes and systems mapped, build or buy assessed, and a scope with a fixed price for the next step. | 1 to 2 weeks | €2,500, credited against the MVP within 60 days |
| Production-ready MVP | The portal for one customer group and one process, connected to your ERP or CRM, with sign-in and roles, tested with real users. | 4 to 6 weeks | €20,000 |
| Production | All customer groups, security testing, monitoring, documentation and handover of all source code to your organisation. | from 8 to 12 weeks | from €50,000 |
| On top | Licences for a portal product or for Entra External ID, plus hosting in your own environment. See our pricing. | ongoing | set by the vendor |
Do not start with a list of twenty features. Pick one customer group and the one process that costs your inside sales team the most time today: often where a delivery is, a copy of an invoice or the status of a fault. Count the calls and emails about it before the portal goes live, so that after the first months you have a real comparison.
Then comes the next customer group or the next process, on the same integrations and the same sign-in. That keeps every step small enough for your change process, and your IT partner sees how the portal is put together from the first release. One named senior engineer stays from scope to handover. For the wider question of how we build next to existing systems, see custom software development.
Tell us which ERP or CRM you run and the three questions your inside sales team gets most. We tell you whether a portal product is enough or which part needs a custom build.
Book a free consultation →