How Orrstown Bank Built One Files.com Portal to Replace SharePoint Guest Access, Box.com, and Secure Email

Orrstown Bank is a community and commercial bank serving Pennsylvania and Maryland, with $5.5 billion in assets and 45 branches following its 2024 merger. Commercial and industrial loans, commercial real estate, mortgages, and small business lending sit at the center of its business, sold on local expertise and direct access to decision-makers.

That kind of lending runs on documents. Throughout a complicated commercial loan, the lender and the client exchange tax returns, pay stubs, and financial statements. Every one of those documents is sensitive. And every one has to cross between the bank and a client who is not a user in any bank system and cannot be assumed to be good with technology.

Secure Email Looked Like Phishing, and SharePoint Guest Access Kept Breaking

The bank had three channels for that exchange, and each cost it something. Lenders sent tax returns and pay stubs through a secure email service, and clients routinely mistook the notification for a scam. Their caution was the right instinct pointed at the wrong target, and it stalled documents while lenders talked clients into opening legitimate mail. Ad hoc submissions ran through Box.com with no Orrstown branding, so clients were asked to upload sensitive financials to a page carrying another company's name.

The channel built for ongoing exchange was a set of external-facing SharePoint sites with guest access, and those failed in the worst way: silently, in the middle of a loan.

“The only way to fix it is to go through a 5- or 10-step process, which takes 20 minutes to a half an hour to completely wipe them from the Office 365 environment and re-invite them.”

Until that process was complete, the client was locked out of their own loan documents. Then Microsoft changed SharePoint's alerting, and the bank found itself writing Power Automate scripts just to know a client had uploaded a file. Linn wanted sensitive client documents out of email entirely. But the channels he could point people to instead were getting worse, not better.

No Passwords for Clients, No Second Admin System for the Bank

A replacement had to work for a non-technical client with nothing to install and no password to forget. A forwarded link could not open for anyone but the invited recipient. The lender needed to know the moment a client uploaded, the lender's assistant needed access to the same workspace, and the exchange could never quietly become permanent storage of client tax records. It also could not hand the bank a second user-administration system to run alongside its directory. And the hardest requirement was not technical at all: the new path had to change the ingrained habits of roughly a hundred staff members, which meant it had to be easier than the email it replaced.

Orrstown selected Files.com to be that portal.

A Branded Client Portal Provisioned From Entra ID Groups

Files.com gave the bank an external exchange it administers from the directory it already manages, with SharePoint remaining as the storage behind the lender workflow. The site authenticates through Entra ID SAML SSO, and SCIM provisioning mirrors the directory into Files.com. Adding a lender to an Entra ID group creates their account, and a Files.com folder behavior automatically creates that lender's client workspace with permissions already set. Access administrators keep working in the one place they already work: putting people into groups. Removal runs the same way. Take a user out of the group and their share links are revoked automatically, with nothing left to shut off by hand.

The client's side of the exchange is a share link that opens a page on the bank's own domain, under the bank's own branding. Instead of a password, the link uses an email one-time passcode. The bank chose that deliberately: clients forget passwords, and a code sent to the invited address means a forwarded link opens for nobody else. Lenders share the workspace with the client and with their own assistant, and email notifications tell the lender the moment a document arrives.

“It has our branding on it, and it looks like we're a big fancy bank that has a secure portal to upload something to.”

Governance is enforced by the platform rather than by anyone's diligence. Linn set the boundary himself:

“I want to enforce a retention period of 60 days, and any files that are older than 60 days should automatically get deleted.”

A 30-day recycle bin backstops mistakes. A handful of the bank's more technically confident lenders piloted the workspaces over roughly three weeks before the wider rollout.

One Governed Channel Designed to Replace Three

The pilot established one governed pattern for the client exchanges Orrstown had handled through secure email, SharePoint guest access, and an unbranded Box.com page.

• A client delivering a tax return follows a link on the bank's own domain and enters a code sent to their own inbox. Nothing looks like a scam, and there is no password to forget or reset.
• Guest access is out of the client's path, and the 20-to-30-minute wipe-and-reinvite fix goes with it. Access is group membership, so an access problem is a group edit.
• The lender's upload alert is a built-in notification, not a Power Automate script somebody has to write and maintain.
• Retention enforces itself. Files older than 60 days are deleted by policy, so the exchange carries the loan without becoming a permanent store of client financials, and nobody purges folders by hand.

The pattern also compounds, because it is a template rather than a lending feature. The bank's fraud and security team uses the same pattern to exchange case files and video with law enforcement, and standing it up for another team is a group and a folder behavior, not a new system.

Exchange That Administers Itself

Instead of asking clients to distinguish secure email from phishing, recover broken SharePoint guest access, or trust an unbranded Box.com page, Orrstown built one branded, passwordless Files.com portal that administrators could provision through Entra ID and govern with automatic retention.