Howto limit a group of users to one portal?

[TonO]

We have the standard ITIL/Incident 'sp' portal to service the employees of our company.

We are looking for a way to limit a group of contractors to an other, specific portal say 'sp2' on the same instance, with less features/catalog items.

The main problem where are struggling with is the openness of the ServiceNow platform and URLs which can also be used to access other portals, backend, UX pages.
We found some ways to:
- Redirect those contractor user back to the portal we want them but during this redirect the original page sometimes flashes by, which is not an very elegant user experience.
- Block operational, special pages like stats.do

Does anyone have experience with this on how to do this?

We are struggling with all the possible URLs those contractors can use to break out of this portal.

[NS]

Hello @TonO, did you come up with some solution for this? I have a similar requirement, preventing users from backend with global client script and redirecting them after logging in with SPEntryPage script include is pretty easy.

But what I struggle with is to prevent these users from accessing any of the other available portals, for example if they just input the URL.