Solutions
For patients
Patients do not self-register. The clinic invites them. From the portal they see their own visits, coverage, claims, and balance.
Only their chart
The portal token cannot open staff tools, and the patient cannot change an id to reach someone else's record.
Pay without an account
A payment link still works for a patient who never accepted the portal invite. The page shows the amount and the clinic, not the clinical note.