Skip to content
EnglishFrançais

Extranet

An extranet is a restricted-access web space that an organization opens to authorized external users, such as partners, distributors, suppliers or business customers. It gives them access to selected content and services (documentation, price lists, orders) without opening the internal information system.

Definition and how it works

Two risks are specific to it. When a contact at a distributor leaves their company, nobody tells you and their access stays active. A distributor must never see another distributor’s prices or orders, including through site search. The article Extranet solution: How to choose the right platform? sets out the selection criteria.

Related terms: B2B customer portal · Intranet · Site search · Web portal

Resources that cover this term

Extranet vs intranet: the differences

An extranet stands apart through its audience and its access boundary, not its technology. The comparison Intranet vs Extranet: What’s the differences covers the distinction in depth.

Extranet and neighboring terms
TermWhat distinguishes it
IntranetReserved for employees, whose accounts come from the company directory. External accounts are created and removed under rules you set up yourself.
B2B customer portalAn extranet dedicated to business customers: contracts, orders, invoices, support.
Public websiteOpen to everyone without authentication. An extranet starts where the organization needs to know who is viewing.

Extranet in practice

Set up two fictitious partner organizations. Sign in with an account from each and try to reach the other’s documents through search, a direct link and a changed identifier in the URL. Repeat this test with every new section.

Frequently asked questions

Is a login page enough to make an extranet?

Authentication is only a precondition. You also need to define what each partner organization can see, isolate data between partners and manage the arrival and departure of external users. A login page in front of a site that is identical for everyone protects very little.

How do we keep external accounts from staying active after a contact leaves?

Three measures work together. Identity federation with major partners cuts access when their employee leaves. Accounts with no sign-in for a set period are deactivated automatically. A periodic review of inactive external accounts is assigned to a named owner.