Tenant Dashboard
Manage all BenchLab RFP client deployments from one place
1
Total Tenants
1
Active
$399
MRR
~45m
Setup Time
Active Deployments
+
Add New Client
Takes ~45 minutes end-to-end
All Tenants
Full list of all client deployments
✦ Add New Client
Provision a new isolated tenant — ~45 minutes
🏢 Client Information
-rfp.benchlabsolutions.com
Client URL: —
🔐 Authentication — How will users log in?
Each client needs their own OAuth app to ensure their users can only access their data. Both Google and Microsoft can be enabled together.
🔥 Firebase Database — Isolated per client
⚠️ Each client must have their own Firebase project. Never share a database between clients — data must be fully isolated.
Firestore Rules to Apply After Setup
rules_version = '2';
service cloud.firestore {
match /databases/{database}/documents {
match /{document=**} {
allow read, write: if true;
}
}
}Security is enforced via Google API key domain restriction. Click Publish in Firebase Console.
📁 Cloud Storage Integration
📂
Google Drive
Resume sync, RFP docs, folder browsing
- 📋Enable Drive API in Google Cloud Console
- 📋Enable Picker API in Google Cloud Console
- 📋Add authorized domain to OAuth consent screen
Find folder ID in the Drive URL: drive.google.com/drive/folders/FOLDER_ID_HERE
🟦
Microsoft OneDrive
SharePoint & OneDrive for Business
Requires Microsoft Auth enabled in Step 2.
- 📋Files.ReadWrite.All permission in Azure
- 📋Sites.ReadWrite.All permission in Azure
- 📋Grant admin consent for org
🤖 AI Proxy (Cloudflare Worker)
Each client should have their own Cloudflare Worker with their API key. Copy the BenchLab worker and deploy a new one at dash.cloudflare.com.
⚙️ Generated Configuration Block
✅ Ready to deploy! Copy this into the constants section at the top of index.html
// Click Generate to create your config
🚀 Deployment Checklist — Complete in order
- 1️⃣Paste config into index.html — replace all constants at the top of the <script> section
- 2️⃣Deploy to Netlify — drag index.html to app.netlify.com → new site → get Netlify URL
- 3️⃣Add custom domain in Netlify → Site config → Domain → Add custom domain → enter clientname-rfp.benchlabsolutions.com
- 4️⃣Add CNAME in Squarespace DNS → Host:
clientname-rfp→ Points to: Netlify URL - 5️⃣Google Cloud Console → OAuth Client → Authorized Origins → add
https://clientname-rfp.benchlabsolutions.com - 6️⃣Firebase Console → Authentication → Authorized Domains → add tenant URL
- 7️⃣Firebase Firestore Rules → paste rules from Step 3 → Publish
- 8️⃣Google API Key restriction → Cloud Console → Credentials → restrict key to tenant URL
- 9️⃣Test → open tenant URL → sign in → confirm empty RFP library → send client their URL + admin email
⚙️ Quick Config Generator
Paste values and get an instant deployable config
Client Details
🔵 Google Auth
🟦 Microsoft Auth (optional)
🔥 Firebase
📁 Drive Folders (optional)
Generated Config — paste into index.html
// Fill in the form to generate config
🔥 Firebase Setup Guide
Create an isolated Firebase project for each client (~10 min)
Step-by-Step Instructions
1
Go to Firebase Console
Visit console.firebase.google.com → Click "Add project" → Name it
clientname-rfp → Disable Google Analytics → Create Project2
Add a Web App
Project Settings (gear icon) → Your apps → Web icon → Register app → Name: "RFP Manager" → Don't enable Hosting → Register → Copy the
firebaseConfig object shown3
Create Firestore Database
Build → Firestore Database → Create database → Start in production mode → Select region (us-east1 recommended) → Enable
4
Set Firestore Rules
rules_version = '2';
service cloud.firestore {
match /databases/{database}/documents {
match /{document=**} {
allow read, write: if true;
}
}
}Firestore → Rules tab → Paste above → Click Publish
5
Enable Google Authentication
Authentication → Get started → Sign-in method → Google → Enable → Add support email → Save. Then Settings tab → Authorized domains → Add tenant URL
6
Restrict Firebase API Key
console.cloud.google.com → same Firebase project → APIs & Services → Credentials → click your Web API Key → Application restrictions → HTTP referrers → add
https://clientname-rfp.benchlabsolutions.com/* → Save🔐 OAuth / Auth Setup Guide
Google OAuth Setup (~10 min per client)
1
Create a new Google Cloud project
console.cloud.google.com → top dropdown → New Project → Name: "ClientName RFP" → Create
2
Configure OAuth Consent Screen
APIs & Services → OAuth consent screen → External → App name: "ClientName RFP Manager" → Support email → Authorized domains:
benchlabsolutions.com → Developer contact email → Save and Continue through all steps3
Create OAuth 2.0 Client ID
Credentials → Create Credentials → OAuth client ID → Web application → Name: "RFP Web Client" → Authorized JavaScript origins: add
https://clientname-rfp.benchlabsolutions.com → Authorized redirect URIs: same URL → Create → Copy Client ID4
Create API Key
Credentials → Create Credentials → API key → Restrict: HTTP referrers → add tenant URL → API restrictions: Drive API + Picker API → Save
5
Enable APIs
Library → search and enable: Google Drive API, Google Picker API
Microsoft Azure AD Setup (~15 min per client)
The client must have an active Azure Active Directory (Microsoft 365 or Azure subscription). You'll need a global administrator to grant consent.
1
Register an App in Azure Portal
portal.azure.com → Azure Active Directory → App registrations → New registration → Name: "ClientName RFP" → Supported account types: "Accounts in this organizational directory only" → Redirect URI: SPA → enter tenant URL → Register
2
Copy IDs
From the Overview page, copy the Application (client) ID and Directory (tenant) ID — you'll need both for the config
3
Configure Authentication
Authentication → Add a platform → Single-page application → Redirect URIs: tenant URL → Enable: Access tokens + ID tokens → Save
4
Set API Permissions
API permissions → Add a permission → Microsoft Graph → Delegated permissions → Select: User.Read, Files.ReadWrite.All, Sites.ReadWrite.All → Add permissions → Grant admin consent for [org name]
5
Paste into Config Generator
Use the Client ID and Tenant ID in the Config Generator. The app uses MSAL.js for Microsoft sign-in and OneDrive access via Microsoft Graph API.
🌐 DNS & Hosting Guide
Point a subdomain to each client's Netlify deployment
Netlify + Squarespace DNS (~10 min)
1
Deploy to Netlify
app.netlify.com → Add new site → Deploy manually → Drag the configured index.html → Copy the Netlify URL (e.g.
amazing-name-123.netlify.app)2
Add Custom Domain in Netlify
Site configuration → Domain management → Add custom domain → enter
clientname-rfp.benchlabsolutions.com → Verify3
Add CNAME in Squarespace
Squarespace → Domains → benchlabsolutions.com → DNS Settings → Add record → Type: CNAME · Host:
clientname-rfp · Points to: amazing-name-123.netlify.app → Save4
Wait for DNS propagation
Takes 5–30 minutes. Netlify automatically provisions an SSL certificate once DNS resolves. The site will be live at
https://clientname-rfp.benchlabsolutions.com5
Future updates
Netlify → Deploys tab → Drag new index.html → site updates immediately. No DNS changes needed.
DNS Records Summary (Squarespace)
| Type | Host | Points To | Purpose |
|---|---|---|---|
| CNAME | rfp | phenomenal-strudel-3f46a7.netlify.app | BenchLab main site |
| CNAME | clientname-rfp | random-netlify.netlify.app | Client 1 (add one per client) |
| CNAME | client2-rfp | another-netlify.netlify.app | Client 2 |
📁 Drive Integration Guide
📂 Google Drive
Users browse Drive folders to pull past proposals and resumes into AI-generated responses.
Features:
- ✅ Browse My Drive + Shared Drives
- ✅ Select any folder as context source
- ✅ Read PDF, DOCX, TXT files
- ✅ Sync resumes from shared folder
- ✅ Search folder contents by keyword
- ✅ Export proposals back to Drive
Required APIs:
• Google Drive API
• Google Picker API
• Google Picker API
🟦 Microsoft OneDrive / SharePoint
For Microsoft 365 clients — access SharePoint and OneDrive document libraries via Microsoft Graph API.
Features:
- ✅ Browse OneDrive folders
- ✅ Access SharePoint document libraries
- ✅ Read DOCX, PDF via Graph API
- ✅ Sign in with Microsoft 365 account
- ⚙️ Requires Microsoft Auth enabled
- ⚙️ Requires admin consent for permissions
Required Permissions:
• User.Read
• Files.ReadWrite.All
• Sites.ReadWrite.All
• Files.ReadWrite.All
• Sites.ReadWrite.All
💰 Plans & Pricing
BenchLab RFP SaaS pricing tiers
Starter
$199/mo
Up to 5 users
- ✅ Unlimited RFPs
- ✅ AI proposal generation
- ✅ Google Drive integration
- ✅ Isolated database
- ✅ Custom subdomain
- ❌ Microsoft OneDrive
- ❌ Multi-user collaboration
MOST POPULAR
Professional
$399/mo
Up to 15 users
- ✅ Everything in Starter
- ✅ Google Drive + OneDrive
- ✅ Real-time collaboration
- ✅ Tasks & audit log
- ✅ Project estimation AI
- ✅ Admin panel & branding
- ✅ Priority support
Enterprise
$799/mo
Unlimited users
- ✅ Everything in Professional
- ✅ Custom domain (client's domain)
- ✅ White-label branding
- ✅ SSO / SAML
- ✅ Dedicated Cloudflare Worker
- ✅ SLA guarantee
- ✅ Onboarding & training
Infrastructure Cost per Tenant
| Item | Cost | Notes |
|---|---|---|
| Firebase (Firestore) | $0 | Spark (free) plan handles most clients easily |
| Netlify hosting | $0 | Free tier is sufficient for single-page app |
| Cloudflare Worker | $0 | 100k requests/day free tier |
| Google Cloud APIs | $0 | Drive/Picker API free up to quotas |
| Anthropic API (shared proxy) | ~$5–20/mo | Depends on usage; per-client keys eliminate this |
| Total infra cost | ~$0–20/mo | Per client, depending on AI usage |