Overview
Sharing content with clients, vendors, and contractors is a routine requirement for most organizations using SharePoint. Rather than routing external document exchange through FTP sites or unmanaged email attachments, SharePoint Online provides a structured, secure, and manageable way to build a dedicated client or partner portal.
This guide walks through every stage of setting up an external sharing portal: understanding how external sharing works, choosing the right site template, configuring authentication, designing the page layout, and controlling access over time.
Blocking external sharing entirely forces users to find workarounds — personal email, consumer file-sharing services, or USB drives — that are far harder to govern. The better approach is to activate but manage external sharing with a clear governance framework in place.
Governance Before You Share
Before enabling external sharing for a portal, put these four governance controls in place:
- Information architecture — Not every site should be externally accessible. HR, Finance, and Executive sites should stay internal. Project sites and group collaboration sites are typically appropriate candidates for external sharing.
- Regular reviews — Schedule periodic reviews of the Security and Compliance Center and Site Usage reports to audit who has access to what.
- User training — Educate site owners on SharePoint’s sharing features, your organization’s sharing policies, and the difference between sharing a whole site versus individual files.
- Access hygiene — Remove external user access promptly when a project ends or a vendor relationship changes.
Understanding External Sharing in SharePoint
Who is an external user?
An external user is anyone who has been granted access to a SharePoint site or document but does not hold a Microsoft 365 license within your organization — typically a client, vendor, partner, or contractor.
What can be shared externally?
| Scope | Use Case | Authentication Required? |
|---|---|---|
| Entire site | Full portal access for a long-term vendor or client | Yes — login required |
| Specific folder | Scoped document delivery for a project or engagement | Optional — link-only sharing is possible |
| Specific document | One-off document delivery | Optional — link-only sharing is possible |
Who can share externally?
- Site owners and administrators
- Any user who is a member of the site’s Members group (by default)
Choose the Right Site Template
Create a dedicated site for your client or vendor portal rather than sharing from an existing internal site. This isolates the external content and prevents accidental access to other areas of your intranet.
| Template | Includes | Best For |
|---|---|---|
| Team Site with Microsoft 365 Group | Teams, Planner, shared mailbox, SharePoint site | External partners who need full collaboration tools beyond document sharing |
| Team Site without Microsoft 365 Group | SharePoint site with left-hand navigation; no Teams/Planner overhead | Recommended for most client/vendor portals — clean, simple, file-focused |
| Communication Site | Visually rich, broadcast-style site with modern web parts | Informational portals where external users consume content rather than collaborate |
For most client and vendor portals, Team Site without a Microsoft 365 Group is the optimal choice. It provides a familiar team site experience with left-hand navigation, full document library functionality, and none of the Microsoft 365 Group overhead (Teams, Planner, shared Outlook mailbox) that external users don’t need.
Create the External Sharing Site
- Sign in to the SharePoint admin center with a SharePoint Administrator account.
- Select Sites > Active sites from the left navigation.
- Click Create.
- On the site creation screen, click Other options (visible when signed in as an admin).
- In the template drop-down, select Team site — this version creates a site without a Microsoft 365 Group.
- Fill in the site name, URL, and owner details, then click Finish.
If you later decide to upgrade this site to a full Microsoft 365 Group site (adding Teams, Planner, etc.), that upgrade path is available. Starting without a Group and adding it later is straightforward; the reverse is not.
Decide: Share the Whole Site or Just Files and Folders?
This decision shapes how much setup work is required before sharing:
- Sharing the entire site — Requires building out the full site: creating all lists and libraries, customizing navigation, and designing the page layout before inviting external users.
- Sharing only files and folders — Create folders in the default document library and share those directly. Less setup, but the external user experience is limited to the document library view.
Authentication — Login or Anonymous Link?
When sharing an entire site, external users must sign in with a Microsoft or work account. When sharing individual files and folders, you have the option of anonymous link sharing — the recipient clicks a link and accesses the content without signing in.
Anonymous link sharing is convenient but carries risk — if someone forwards the link, anyone with it can access the content. For any confidential or client-specific material, require authenticated access only. Your Microsoft 365 admin can enforce this at the tenant or site level in the SharePoint admin center under Policies > Sharing.
Page Design Best Practices
Once your site is created, customize the page before inviting external users. First impressions matter — a clean, well-organized portal signals professionalism to clients and vendors.
Layout and structure
- Use multi-column zones — Modern pages default to a single-column layout. Divide the page into two or three zones to fit more content on screen without requiring the user to scroll.
- Remove the banner on working sites — The hero/banner web part takes up roughly half the screen on a laptop. It is appropriate for an intranet landing page but unnecessary on a project or document portal. Remove it to give users immediate access to content.
- Minimize vertical scrolling — If key information requires three pages of scrolling, users will not find it. Aim to surface 4–6 web parts within the visible area on a standard laptop screen.
Web part selection
- Do not embed a document library directly on the page — Use the left-hand Quick Launch menu or a Quick Links web part to link to the library instead. Embedded document libraries consume excessive vertical space and provide a poor visual experience.
- Avoid duplicate web parts — Site Activity and the Highlighted Content Web Part (HCWP) both surface recent content. Page Comments and a Yammer feed both provide social commenting. Choose one from each pair.
- Disable page comments if unused — Every modern page includes a Comments section at the bottom. If your portal is not designed for social feedback, turn this off to avoid confusion for external users.
- Only add web parts you actually need — Just because a web part is available does not mean it belongs on the page. Keep the canvas purposeful.
Branding
- Use a square logo — Modern SharePoint sites display logos in a square format. Rectangular logos are automatically cropped into a square container, which typically makes them appear small or distorted. Prepare a square version of your logo before applying it to the site.
Navigation
- Keep the Quick Launch menu clean — Remove the default Pages and Site Contents links. External users have no use for them and they add noise to the navigation. Limit the left-side menu to 5–7 relevant links maximum.
- Remove Quick Launch entirely if not needed — If the site has no links worth displaying in the left panel, remove them all and save the page. On reload, the left-hand panel disappears and the page becomes full-width automatically.
Removing all Quick Launch links also removes the Search box from the site page. If users need site-level search, keep at least one link in the Quick Launch — or use an alternative search entry point — before removing the panel entirely.
Set Up Alerts (Optional)
SharePoint’s Alerts feature can notify you by email when external users upload, modify, or delete content in a shared folder. This is useful for auditing activity and staying informed about what clients and vendors are doing in your portal without having to log in and check manually.
To set an alert, navigate to the library or folder, click the three-dot menu, and select Alert me. Configure the event type (all changes, additions only, deletions only) and delivery frequency.
Share the Portal
With the site built and the page finalized, share access with external users:
- Click Share from the site’s top navigation or the document’s command bar.
- Enter the external user’s email address.
- Set the appropriate permission level — typically Can view or Can edit depending on whether the user needs to upload files.
- Add an optional message, then click Send. The recipient receives an invitation email with a link to the portal.
Control and Monitor External Sharing
After external users have been granted access, ongoing monitoring is essential. Use the Site Usage Report in the SharePoint admin center to track who is accessing the portal and when. Regularly review the Security and Compliance Center for any anomalous sharing activity or overly broad permissions that should be tightened.
Remove external user access as soon as a project, contract, or relationship ends. In the SharePoint admin center, navigate to Sites > Active sites, open the site, and manage membership from the site’s permissions panel.
Summary
Building a dedicated SharePoint Online portal for clients and vendors is straightforward when approached methodically. Choose the right site template, decide on authentication requirements upfront, design the page for a clean external-user experience, and put governance controls in place before sending the first invitation. The result is a professional, secure, and auditable document-sharing environment that replaces FTP sites and uncontrolled email attachments entirely.
