One domain, three portals. Access is by invitation only, in a role with a scope and an end date. Every sign-in is recorded in the audit trail.
No account? Access is by invitation from your administrator.