Policy Automation for B2C Service

Get Involved. Join the Conversation.


    Scott Heidenreich
    OPA and Customer Portal Login for organizations?
    Topic posted June 7, 2018 by Scott HeidenreichBronze Trophy: 5,000+ Points 
    114 Views, 4 Comments
    OPA and Customer Portal Login for organizations?


    I have a use case where I need to let several people associated with an organization and its hierarchy in OSvC to login using the Organization login and password, so they can access contact information for the parent organization and any child or grandchild (etc.) in the hierarchy.

    This would entail having the user login to the organization, have OPA use the organization ID to retrieve the related orgs and their contacts, then allowing the user to step through each organization and update the contact lists.

    Is it possible to have OPA recognize a user logged in as an organization the way it does for a logged in contact?  If so, how do I get the customer portal configured to allow logging in as an organization and get OPA to allow that login to function in the data mapping for Customer Portal users (Contact).  Or is this not possible?

    Thank you.




    • Davin Fifield

      It is never a good idea to share a single login across multiple users - for example, what do you when one of those users leaves? You'd have to change the password to ensure that individual no longer has access. 

      It looks like you should be able to accomplish this as a logged in Agent - with Organization mapped in at the top level, and then child organizations mapped in via the Child Organizations relationship to a second entity, and contacts below that. 

      But I'd caution that performance could be poor if the number of child organizations and contacts gets large.

      Achieving this via a customer portal user is not possible, since they don't have access to Organizations.


    • Scott Heidenreich

      Thank you!  So, what is the organization login and password for in OSvC?

      While our universe of orgs for this app is relatively large (about 10,000 parents), There shouldn't be more than a dozen contacts for any one child organization, and not more than a dozen child organizations for anyone parent organization. So, I think performance will be ok.  I plan to use the ability of OPA to dynamically load the contacts when a child organization is selected, so that might further minimize the performance issues, at least during the loading.  Saving, might be a little slow for the parent organizations that have a larger number of child orgs.  But there are only a few of those.

      Best regards,



    • Fiona Guy

      There is no "organization login" (that I'm aware of!). Davin is suggesting you could have an agent login (profile) with access to organization. 


    • Scott Heidenreich

      Thank you - I think I need to clarify that I'm talking about the "Organization" standard object that comes with OSvC and is related to the Contacts standard object.  There are password and login fields in the Organizations standard object.  If there is no login capability for an "Organization" then what are the password and login for an Organization record used for?