Share files with customers securely
Hi all,
I’ve been trying to figure this one out for a while.
We have a requirement to share pdfs to person accounts, however the client has stated pdfs cannot be simply sent as an attachment to an email as they view this as insecure.
They currently have a system (they are moving from this system to salesforce) that, whenever a document is tagged as ‘shared’ a notification email is sent to the account, stating ‘a document has been shared with you please click here to view’ this navigates the user to a portal where they verify their identity via their date of birth, once verified they have the ability to view all their shared documents.
Now, it seems that some authentication occurs from the link in the email, as if you copy the url from the date of birth verification page into a new tab the page states ‘please click the link in your email to access this page’.
I’ve a few ways to do this - 1. Experience cloud get the users to login to view their records. However the client wouldn’t be up for paying a license for community users.
Content delivery - however passwords cannot be set, to something identifiable- Client would view this as too complex as if multiple pdfs are sent over a few months they all have different random passwords
Slap the docs behind a custom portal and use api to serve clients their docs (out of my skill set)
Send PDFs to a my server run php script to generate my own password on the pdf and send back to salesforce (out of my skill set)
I’m wondering if I’m missing something simple, we have an external dev that can help but he’s super busy, but I can bring him in if I’ve exhausted all options. I want the right and correct solution for the client, customers and security of data. How would you guys tackle this ?