Signing In to the Client Portal
How an agent gets into their client portal with a magic link — no password, no account setup — and why they only ever see their own data.
Last updated
Signing in to the client portal is passwordless. Agents never set a password, and they can’t use a “forgot password” flow — there isn’t one for client accounts.
Where agents sign in
The portal only lives on your business’s own subdomain or custom domain, at /portal/login. It doesn’t work on the main Spatiko app — an agent who lands there gets bounced to the regular login page instead.
How the magic link works
- The agent enters their email at
/portal/login. - Spatiko checks for a Client record matching that email at your business. If none exists, nothing is sent — and the page doesn’t reveal whether an account exists either way.
- If a Client record does exist, Spatiko emails a secure login link. The link is single-use and expires after 15 minutes.
- Clicking the link signs the agent in and lands them on
/portal.
There’s no signup form. The first time an agent clicks a valid link, Spatiko creates their account automatically in the background — no separate welcome or consent step.
What happens behind the scenes on first sign-in
On that first successful click, Spatiko:
- Creates the agent’s user account silently.
- Links every Client record for that email at your business to the new account.
- Creates an empty Agent Profile for them, carrying over the company name from their Client record as a starting brokerage name.
From then on, the agent is a normal signed-in user with a session — future sign-ins just verify the link and take them straight to /portal.
Why agents only see their own data
Access to the portal is tied entirely to having a Client record linked to the signed-in account. An agent with no Client record at your business gets a “not a client account” error, even if they separately work as staff at a photography business.
Every portal page and download re-checks, server-side, that the order or website being requested belongs to a Client linked to that agent — and, when accessed from your subdomain, that the record belongs to your business specifically. So an agent who’s a client of several photographers never sees one business’s data while signed in on another’s site.
Related
- The client portal — what agents can do once they’re signed in.
- Delivering your media — how a shoot first reaches an agent.