Alis, the internal HR portal of BNP Paribas, centralizes the management of pay slips, leave, and the career paths of the group’s employees. Accessing this platform from a workstation outside the professional network poses a concrete problem: the security architecture of the portal was not designed for open internet use. Since mid-2024, the situation has become even more complicated, as the domain alis.hr.bnpparibas displays a maintenance message with no reopening date communicated.
Alis Portal Under Maintenance: What the Technical Blockage Implies
Since July 2024, any attempt to access the Alis portal, including via a secure URL or a VPN, encounters a maintenance page with no recovery timeline. The browser displays an error message or a blank screen, regardless of the workstation used.
This blockage does not differentiate between internal and external connections. Employees working remotely and those present in the agency face the same impossibility. No official communication from BNP Paribas has publicly specified the cause of this prolonged unavailability or the date for resuming service.
The available data does not confirm whether this maintenance concerns a technical migration, a security enhancement, or another reason. Field reports vary on this point: some employees report intermittent access restored, while others experience a persistent total blockage. Several resources detail the usual procedure for connecting to Alis BNP Paribas internet, but these guides remain inoperative as long as the portal is not restored.
Group VPN and Security Validation: Access Locks Outside BNP Paribas Network
Under normal operation, access to Alis from outside the internal network relies on a strict chain of prerequisites. Having HR credentials is not enough.
- The employee must connect from a workstation enrolled by the group, which excludes any personal computer, private tablet, or smartphone not managed by BNP Paribas’ IT department.
- A group VPN tunnel must be active. This VPN encrypts the connection and simulates a presence on the internal network, but its installation and configuration are reserved for validated equipment.
- Multi-factor authentication (MFA) is required in addition to the usual username/password pair. Without this second factor, the connection is denied even if the VPN is functioning.
- An explicit validation by the security administrator must have been granted beforehand. This authorization is not automatic: it is added to the standard HR rights related to the employment contract.
Without this prior validation, attempting to connect from outside may result in an automatic lockout of the username. No self-service unlocking procedure exists for this scenario. The employee must then contact their security administrator or internal IT support to regain access.
Browser and Technical Compatibility
The Alis portal imposes browser constraints. Outdated versions or browsers not listed by the group’s IT department may trigger a server-side blockage. Chrome, in certain configurations, displays an error of type ERR_BLOCKED_BY_CLIENT, related to security extensions or network policies applied to the workstation.
Using an up-to-date browser, without blocking extensions, remains a prerequisite often overlooked. However, even a perfectly configured browser will not bypass the absence of a VPN or administrator validation.
Remote Work and Access to Alis: Why Personal Workstations Are Excluded
BNP Paribas’ choice to exclude personal workstations from accessing Alis is not a mere implementation detail. It is a security decision related to the nature of the data hosted on the portal: pay slips, bank details, career history, contractual information. This sensitive HR data falls under GDPR and the group’s internal data protection policy.
A personal workstation cannot guarantee the same level of control as equipment managed by the IT department. Lack of validated antivirus, outdated operating system, unsecured home Wi-Fi network: each weak link increases the risk of data leakage. The group prefers to restrict access rather than expose this information.
For employees working regularly from home, the solution involves providing a portable professional workstation, pre-configured with the group VPN and necessary security certificates. Employees on occasional business trips who do not have this equipment find themselves without access to Alis, which can delay the consultation of urgent HR documents.
Concrete Alternatives in Case of Inaccessibility to the Alis Portal
In the face of the prolonged unavailability of the portal or the absence of professional equipment, a few options exist.
The first is to perform the initial registration from a BNP Paribas workstation in an agency or office, as recommended by the FO Banques union in 2018. This prior registration is necessary to activate the Alis account and set up future external access.
The second option is to directly contact the HR department or internal IT support to obtain the requested documents (pay slip, employer certificate) through an alternative channel. The Alis portal is not the only means of transmitting these documents, even though it is the most convenient under normal circumstances.
The Echonet platform, another internal portal of the group accessible via echonet.bnpparibas, offers a distinct external connection. Employees needing general information about the group (news, directory) can check if their Echonet access works, although this portal does not replace the HR functions of Alis.
Access to Alis outside the BNP Paribas network remains conditioned on a combination of validated equipment, active VPN, MFA, and administrative authorization. As long as the portal remains under maintenance, none of these steps will lead to an effective connection. Monitoring the group’s internal communications remains the only reliable way to know when the service will be restored.