ALIS is the digital HR portal of the BNP Paribas group. It centralizes payslips, contracts, certificates, and leave requests from employees. Accessing your payslip in this space requires mastering an authentication process distinct from that of traditional banking applications.
Multifactor Authentication on ALIS: The Technical Prerequisite to Understand
Since the migration to the group IDP, logging into ALIS relies on multifactor authentication (MFA). Specifically, after entering your username and password, the system sends a push notification or generates a temporary code on a pre-registered device.
Further reading : How to Access Your Online Email Account: Options and Solutions
This mechanism aligns access to HR documents with the same security standards as BNP Paribas’s front-office applications. For the employee, this means that a simple username/password combination is no longer sufficient. If MFA has not been activated beforehand, the portal loops back to the login page or displays a generic error, without specifying the actual cause of the blockage.
Finding your payslip on Alis BNP Paribas therefore requires having completed two steps at the time of hiring or service activation: creating the initial password and registering the device for MFA.
See also : Simplify Your Life: How to Manage Your Administrative Formalities Online?
Initial Password and MFA Activation: The Two Common Blocks to ALIS Login
Consolidated feedback from HR support and union representatives (FO, CFDT) converge on one point: remote blocks are the primary cause of connection failure to ALIS for viewing payslips. In the vast majority of cases, the problem does not stem from the network, but from these two unfinished steps.
Creating the Initial Password
The ALIS username is provided at hiring, often via internal email or through the manager. The temporary password must be changed during the first login. As long as this operation is not performed on the BNP Paribas internal network, any subsequent attempt (including remotely) fails without an explicit error message.
Registering the MFA Device
MFA activation is generally done from a workstation connected to the company’s network. If this step has been skipped or postponed, the portal denies access even with a valid username and password. The employee then loops on the authentication page without understanding what is blocking them.
- Ensure that your initial password was indeed changed during your first login on the internal network.
- Confirm that MFA is active by checking for the receipt of a push notification or a temporary code on your registered device.
- If no notification arrives, contact HR support to request a reset of the MFA registration.
Logging into ALIS Outside the BNP Paribas Network: VPN and Security Constraints
Accessing payslips via ALIS is technically possible from outside the BNP network. The group VPN remains the only truly reliable remote channel for viewing your payslips without risking a security block.
Connecting from a public Wi-Fi or a personal VPN exposes you to immediate connection rejection. The detection system identifies these networks as non-compliant and suspends access, sometimes with an automatic alert. The procedure allows for no approximation: only the VPN provided by the company guarantees the secure tunnel recognized by the group IDP.
For employees working remotely, this means that the BNP Paribas VPN must be launched before opening the ALIS page. The order matters: if the browser loads the authentication page before the VPN tunnel is established, the session may be invalidated and require a complete restart of the process.
Downloading and Archiving Payslips from the ALIS Portal
Once logged in, viewing payslips is done from the section dedicated to HR documents. The payslips are organized by month and year. Downloads are in PDF format, allowing them to be stored on a hard drive or a personal storage service.
ALIS does not retain payslips indefinitely. Documents are deleted over the years, without systematic notification before their deletion. This archiving policy imposes discipline: download each payslip as soon as it is available rather than relying on the portal’s permanent availability.
- Download your payslips each month as soon as you receive the notification of availability.
- Store them in a local folder or a personal digital safe separate from ALIS.
- Regularly check that payslips from previous years are still accessible, and retrieve them before their deletion.
The ALIS portal does not offer a bulk export of all payslips. Each document must be downloaded individually, which can be tedious for reconstructing a complete history when applying for a loan or changing employers.
The difference between smooth access and a series of blocks on ALIS often comes down to two actions taken (or forgotten) on the first day: changing the temporary password and activating MFA on the internal network. Once these prerequisites are met, viewing payslips remotely via the group VPN works without particular difficulty.
The question of archiving remains the responsibility of each employee as long as the portal applies its progressive deletion policy.