The Dynamics 365 Customer Engagement portal authenticates logins against a 'web portal' enabled Contact record. Authorization is provided by the .NET platform. In addition to this local authentication process, authentication can be enabled to allow Facebook, Google, and Azure AD to authenticate. Where client requirements look to restrict 'data at rest' and 'data in transit' to specific geographic locations, it is likely that these authentication methods are disabled.
