The Alis BNP Paribas portal centralizes the administrative life of the group’s employees, but logging in is not just about entering a username and password. Since the deployment of multi-factor authentication via the group Identity Provider, a significant portion of HR support requests comes from employees who get stuck at the very first steps. Understanding the technical mechanisms behind access to the portal can help avoid most of these blockages.
MFA Authentication and Group IDP: What Has Changed for Alis BNP Paribas
Since 2024-2025, logging into Alis goes through the group Identity Provider (IDP) with multi-factor authentication. This change aligns the employee portal with the security standards applied to sensitive front-office applications and finance tools.
Specifically, two steps condition access: the creation of the initial password, followed by the activation of MFA. As long as these two operations are not completed, the portal remains inaccessible. This mechanism explains why newcomers and remote employees encounter the most frequent blockages.
| Step | Location of Completion | Consequence if Not Completed |
|---|---|---|
| Creation of the initial password | Workstation (internal network or group VPN) | No access to Alis or HR modules |
| Activation of MFA | Authentication app on professional or personal smartphone | Redirected in a loop to the IDP page, authentication error |
| Current login | Internal network, group VPN, or authorized remote access | Normal access to all modules |
Employees attempting to log into Alis BNP Paribas from a personal workstation without the group VPN often encounter an IDP restriction that blocks the connection even before entering the password.
Compatible Browsers and Network Constraints for Accessing Alis
The technical environment plays a direct role in the success or failure of the connection. Alis works on recent versions of Chrome, Edge, and Firefox. Older versions of Internet Explorer cause display errors or redirect loops to the IDP.
Group VPN or Personal Connection: Very Different Results
For remote connections, the nature of the network used makes all the difference. A personal VPN or public Wi-Fi frequently triggers additional restrictions on the IDP side. The group VPN is the only reliable channel for remote connection to the HR portal.
This constraint surprises employees used to accessing other BNP Paribas services from their home connection. Alis applies stricter network filtering rules than most of the group’s internal tools.
- Up-to-date Chrome, Edge, or Firefox: the three browsers validated by the group IDP for Alis
- Internet Explorer (all versions): frequent redirection errors, to be systematically avoided
- Active group VPN: required for any connection outside the BNP Paribas internal network
- Public Wi-Fi or personal VPN: connection blocked or unstable in most cases
Blockages for Newcomers Working Remotely: A Recurring Issue
Employees starting to work remotely face two difficulties: they have not yet completed the creation of their initial password, and they do not always have the group VPN configured on their workstation.
The standard procedure stipulates that the password creation takes place on the internal network during the first days in person. An employee who starts directly remotely finds themselves in a technical deadlock: the IDP refuses the connection, and the password creation procedure is not accessible outside the network.
Bypassing the Initial Blockage Without Access to the Internal Network
The solution involves HR support or the IT service, which can initiate a remote provisioning procedure. This process remains longer than an on-site activation. The timelines vary depending on the subsidiary and the support load.
For employees already connected who lose their access after a change of position or affiliation, the problem is different. Access rights to Alis modules depend on the scope defined by the HR management of the entity. A change of subsidiary may temporarily remove access to certain modules without the account being deactivated.
HR Modules Accessible According to the Status of Alis Employees
Not all employees access the same functionalities. The Alis space adapts the visible modules according to status (permanent, fixed-term, apprentice, intern) and hierarchical level.
| Module | Permanent / Fixed-term | Apprentice / Intern | Manager |
|---|---|---|---|
| Pay slips | Yes | Yes | Yes |
| Leave management | Yes | Yes | Yes (team validation) |
| Training catalog | Yes | Partial | Yes |
| Annual reviews | Yes | No | Yes (entry + validation) |
| Career tracking | Yes | No | Yes |
Apprentices and interns have access to a limited scope. The training catalog, for example, only displays the courses related to their contract. Modules appear gradually, sometimes several days after the account activation, which raises legitimate questions.
- Managers have additional functionalities: validation of their team’s leave and entry of annual reviews
- Rights evolve automatically during a status change, but with a variable propagation delay
- Some modules specific to a subsidiary may not appear in all entities of the group
The Alis portal remains strictly reserved for employees of the BNP Paribas group. It should not be confused with the banking client space, accessible with different credentials. The distinction between these two spaces is the most frequent source of confusion, well ahead of technical issues related to MFA or VPN.