EPC Group has shipped Power Pages portals across every industry vertical. Six patterns dominate enterprise deployments — each with a distinct audience, identity model, integration surface, and security profile. The right pattern is the one where the existing Dataverse footprint, the audience, and the team’s skills line up.
Customer self-service portal
Audience
Authenticated customers (B2C identity)
Customers sign in to view account status, submit service requests, track open cases, download statements, manage subscription preferences, and update profile information. The portal reads and writes to the same Dataverse tables Dynamics 365 Customer Service uses, so cases opened in the portal land directly in the agent queue with no integration layer.
Real-world examples
A regional bank running statements + dispute submission + branch-appointment scheduling. A SaaS company running tier-1 self-service + case management + knowledge-base search. A retail chain running loyalty + warranty + product registration.
Design note
B2C identity is the choice that drives most of the cost. Microsoft Entra External ID for customers (formerly Azure AD B2C) is the supported path going forward. Custom local-account authentication is supported but EPC Group recommends against it for new builds — the maintenance burden is real and the security review is harder to pass.
Audience
Authenticated partners (B2B identity)
Partners — resellers, dealers, brokers, distributors, referral partners — sign in to manage deal registrations, submit quotes, access enablement content, review commission statements, and collaborate on co-sell opportunities. The portal binds to Dataverse tables shared with Dynamics 365 Sales, so partner-submitted opportunities appear in the partner-channel manager pipeline without integration.
Real-world examples
A manufacturer running a 2,400-dealer network with quote configurators and warranty claims. An insurance carrier running a broker portal with commission visibility and policy lookups. A software vendor running deal registration and co-sell tracking for a 600-partner ecosystem.
Design note
B2B SSO through Entra External ID is the supported pattern when the partner organization is itself a Microsoft tenant. Partners sign in with their own corporate identities, and the portal recognizes them through the cross-tenant trust. For partners not on Microsoft, B2C identity with email + multi-factor authentication is the fallback. Most enterprise deployments need both paths configured.
Employee benefits and HR portal
Audience
Authenticated employees (Entra SSO)
Employees sign in (with their corporate identity, no separate account) to enroll in benefits, submit time-off requests, view pay history, complete onboarding tasks, update emergency contacts, and access the HR knowledge base. The portal binds to Dataverse tables that integrate with the HRIS of record (Workday, SuccessFactors, Dayforce, UKG) through Power Automate cloud flows or Azure integration.
Real-world examples
A 18,000-employee health system running open-enrollment + ongoing self-service. A multi-state retailer running onboarding workflows for high-turnover roles. A federal contractor running clearance-status visibility and personnel-action tracking.
Design note
Entra SSO is non-negotiable — employees should not have a separate password to the benefits portal. The portal authenticates through the employer Microsoft Entra tenant and inherits MFA, conditional access, and device-compliance policies. Web roles in Power Pages map to Entra security groups so role-based access is managed in the same place as every other corporate resource.
Government citizen-services portal
Audience
Authenticated and anonymous citizens
Citizens apply for permits, renew licenses, submit code-violation reports, track case status, pay fees, and access public records. Anonymous visitors browse content and start applications; authenticated citizens (through Entra External ID or a state identity provider) see personalized case history and saved data. The portal binds to Dataverse tables that drive caseworker model-driven apps and analytics dashboards.
Real-world examples
A municipal building department running permit applications + inspection scheduling. A state DMV running license renewal + plate transfer. A county health department running food-service permit applications and inspection-result lookup.
Design note
Citizen-services portals are the most common pattern where Entra External ID is paired with an external identity provider — many states have a single-sign-on identity standard for citizens that has to integrate through OIDC or SAML. Power Pages supports both. Accessibility (WCAG 2.1 AA at minimum, Section 508 for federal) is a hard requirement and has to be designed in from the first page, not retrofitted before launch.
Vendor and supplier onboarding portal
Audience
Authenticated vendors (B2B identity)
Prospective vendors register, submit qualifications, upload insurance certificates, complete supplier-diversity surveys, and track approval status. Active vendors sign in to update banking information, submit invoices, review purchase orders, acknowledge receipt, and respond to RFQs. The portal binds to Dataverse tables shared with Dynamics 365 Supply Chain Management or a custom procurement schema.
Real-world examples
A manufacturer running supplier qualification + ongoing PO acknowledgement. A healthcare system running vendor-credentialing and W-9 management. A federal prime contractor running subcontractor onboarding with CMMC self-attestation capture.
Design note
Vendor portals are document-heavy. Dataverse file columns and SharePoint document-library integration both have a place. EPC Group designs the document strategy alongside the table schema — file columns for small structured artifacts (W-9, COI), SharePoint integration for large unstructured artifacts (engineering specs, qualification packets).
Regulated industry application portal
Audience
Authenticated applicants in HIPAA, FINRA, CMMC, or FedRAMP-relevant flows
Patients enroll in care programs, brokers complete continuing-education attestations, defense contractors submit CMMC self-attestations, financial-services applicants complete KYC and AML capture. Every workflow requires identity proofing, audit logging, data-classification handling, and (often) eSignature integration. Power Pages binds to Dataverse with sensitivity labels propagated through to outputs.
Real-world examples
A specialty pharmacy running patient onboarding under HIPAA Business Associate scope. A broker-dealer running continuing-education attestation under FINRA recordkeeping. A defense supplier running CMMC self-attestation capture for prime contractors.
Design note
Regulated portals are where EPC Group spends the most time on the security review. Microsoft Purview sensitivity labels on Dataverse columns, Cloudflare or Azure Front Door web application firewall in front of the portal, audit logging into the unified audit log, eSignature integration through Adobe Acrobat Sign or DocuSign, and a documented privacy-impact assessment before go-live are all standard scope items. Compliance frameworks supported include HIPAA, SOC 2, FedRAMP, FINRA, CMMC, GxP.