I got tired of inviting the same person four times.

Okta is an identity provider. Rippling is an HR system. ShellStack is the control plane for the work: people, workspaces, app access, one bill.

Nobody sets out to collect admin consoles. You buy a board, then a timer, then a wiki. Each tool is fine. The tax arrives later: five invites, five roles, five bills, and a new person who can see the wrong client on day one.

Invite once. Assign a role. Tick the apps they should have. Restrict workspaces if a contractor should not see every client. Opening an app signs you in there. The apps keep separate sessions. The person does not keep separate accounts.

What the portal actually does

• Roles: owner, admin, editor, member. App access is separate from role. A bookkeeper can be timer-only.
• Workspace restrictions are intent. Each app still checks membership and access when the person arrives.
• Organisation policy plus workspace app connections. Sign in with a work account you already have.
• Billing is on the organisation: seats, workspaces, integrated access, optional AI add-ons. The plan is enforced for you, not by a frontend lock.
• Home is the launcher. The app switcher inside the apps jumps between siblings without a second signup.

The products handle the work. This place handles the organisation behind it.

Use ShellStack when you want one membership, not another identity platform.