MSC Integration Docs
Vendor portals
Overview
- The supplier portals MSC already uses are checked first, in MSC's priority order, before any RFQ is drafted.
- A line fully answered from a portal never generates an email. A partly answered line generates an RFQ for the missing fields only.
- Every portal session is recorded, so MSC can see where each value came from.
Phase: Pilot. MSC owner: Vendor management.
Setup
- Vendor management lists the portals in priority order. Weeks 3–4.
- Vendor management issues a credential for each portal and names its MFA method.
- MSC IT provides an MSC-controlled mailbox or phone number for portals that send one-time codes.
- Faction stores the credentials in a vault and configures an agent per portal.
- Faction and sourcing leads review the first results on sample lines.
What is captured
Where the portal shows them: price (MSC cost and list), availability and quantity on hand, lead time, MOQ and pack quantity, item status and phase-out date, unit of measure, country of origin, weight and dimensions, and category and description. Each value is stored against the 19 fields with the portal named as its source.
How MFA is handled
| Portal MFA method | Handling |
|---|---|
| Authenticator app (TOTP) | The seed is enrolled in the vault and codes are generated at sign-in |
| Email or SMS code | Codes go to an MSC-controlled mailbox or number that the agent reads |
| Federated to MSC's Entra ID | Handled through the Entra ID app registration |
| Hardware token | Portal is marked manual; its lines go straight to RFQ |
Security
- Credentials are issued by MSC, held in a vault, and revocable by MSC at any time.
- Each agent holds only its own portal's credential.
- Cost captured from portals is visible to internal sourcing roles only.
Frequently asked questions
Can MSC see what the agent did on a portal?
Yes. Each session records the pages visited, searches run and values captured, with a screenshot at each capture.
Which portals can be used?
Any portal MSC already has a login for. Portals that require a hardware token are marked manual, and their lines go straight to RFQ.
MSC provides: the portal list, credentials and MFA methods.
Faction handles: credential storage, the agents, session recording and monitoring.