# Accessing the Backoffice

{% hint style="info" %}
*<mark style="color:blue;">Path: Back office</mark>*
{% endhint %}

{% hint style="danger" %} <mark style="color:red;">Never share your login information. Users can each have individual credentials.</mark>
{% endhint %}

* [URL to access the Backoffice PRODUCTION ENV.](#id-1.16.x-accessingthebackoffice-urltoaccessthebackofficeproductionenv.green)
* [Initial user & subsequent users PRODUCTION ENV.](#id-1.16.x-accessingthebackoffice-initialuser-and-subsequentusersproductionenv.green)
* [Back office login page](#id-1.16.x-accessingthebackoffice-backofficeloginpage)
* [Two-factor authentication](#id-1.16.x-accessingthebackoffice-two-factorauthentication)
* [Remove Back office access](#id-1.16.x-accessingthebackoffice-removebackofficeaccess)
* [Related resources](#id-1.16.x-accessingthebackoffice-relatedresources)

<mark style="color:orange;background-color:yellow;">WHO CAN USE THIS FEATURE?</mark>

Operators who possess an active account and appropriate credentials are granted access to all or specific back-office functionalities. Vendors and customers are not authorized to access the back office.

## URL to access the Backoffice PRODUCTION ENV. <a href="#id-1.16.x-accessingthebackoffice-urltoaccessthebackofficeproductionenv.green" id="id-1.16.x-accessingthebackoffice-urltoaccessthebackofficeproductionenv.green"></a>

Upon the creation of your Operator account, an official notification email will be dispatched to you. This email will include essential details such as the Back-office URL, providing you with access to the platform.

For enhanced security measures, SCND employs a dynamically generated URL for accessing the back office (e.g., yourdomain.com/randomlygeneratedstring). This URL is established during the initial setup of the platform by configuring the "second\_admin\_alias" parameter. Subsequently, administrators can modify this string via the "Parameters" interface within the Backoffice: [Parameters](broken://pages/POXTmOJPnU7KkxV45MPz)

{% hint style="warning" %} <mark style="color:orange;">Changing the URL access string affects all users. You will have to share the new URL with them, without which they will no longer be able to access the back office.</mark>
{% endhint %}

## Initial user & subsequent users PRODUCTION ENV. <a href="#id-1.16.x-accessingthebackoffice-initialuser-and-subsequentusersproductionenv.green" id="id-1.16.x-accessingthebackoffice-initialuser-and-subsequentusersproductionenv.green"></a>

### Initial user (super-administrator) <a href="#id-1.16.x-accessingthebackoffice-initialuser-super-administrator" id="id-1.16.x-accessingthebackoffice-initialuser-super-administrator"></a>

Upon the initiation of the platform, the inaugural user is endowed with the utmost level of permissions, assuming the role of super-administrator by default. This designation is established during the initial setup process. Detailed instructions for configuring the initial user account can be found in the technical documentation.

### Inviting other users (operators) <a href="#id-1.16.x-accessingthebackoffice-invitingotherusers-operators" id="id-1.16.x-accessingthebackoffice-invitingotherusers-operators"></a>

After the initial setup, access to the back office is granted solely to the Super-administrator. Acting as the primary account holder, the Super-administrator assumes the responsibility of [configuring user roles](/v2.0/superadmin/access-rights/roles-management.md) and extending[ invitations to additional operators](/v2.0/superadmin/access-rights/administrators-management.md) for collaboration within the back office environment.

***

## Backoffice login page <a href="#id-1.16.x-accessingthebackoffice-backofficeloginpage" id="id-1.16.x-accessingthebackoffice-backofficeloginpage"></a>

{% hint style="danger" %} <mark style="color:red;">**Spoofing alert:**</mark> <mark style="color:red;"></mark><mark style="color:red;">always confirm that the URL you’re viewing corresponds to the URL of your Backoffice login page before entering your credentials.</mark>
{% endhint %}

When accessing the Back office, a login form is displayed:

<figure><img src="/files/uC7Rs2BFUHD58V1nSf2k" alt=""><figcaption><p>Figure 1</p></figcaption></figure>

As a user, you'll find an account creation notification in your email inbox, corresponding to the email address associated with your Back office account. This notification serves as a confirmation of your recent account setup.

When you first log in, you will be prompted to create your own password. This password will be set by you and will be used for future logins.

### Recovering a lost password <a href="#id-1.16.x-accessingthebackoffice-recoveringalostpassword" id="id-1.16.x-accessingthebackoffice-recoveringalostpassword"></a>

To recover your password, click on the “*Forgot your password ?” (figure 2)* link beneath the login form:

<figure><img src="/files/xQRlMsKsjboqA3BbOPJn" alt=""><figcaption><p>Figure 2</p></figcaption></figure>

Enter your email address to receive an email containing a link to reset your password:

<figure><img src="/files/5jDoUMRBJuKy8EFGSbNg" alt=""><figcaption><p>Figure 3</p></figcaption></figure>

{% hint style="success" %} <mark style="color:green;">Do not forget to check your spam if you do not see the email in your main inbox.</mark>
{% endhint %}

{% hint style="warning" %} <mark style="color:orange;">The number of password requests is limited. The rate limit can be viewed and changed through the</mark> [“Configurations”](/v2.0/superadmin/configurations/features.md) <mark style="color:orange;">interface.</mark>
{% endhint %}

Password policy: for security purposes a strong password policy is enforced. Password requirements:

{% hint style="info" %}

* <mark style="color:blue;">Minimum password length: 10 characters</mark>
* <mark style="color:blue;">Contain at least:</mark>
  * <mark style="color:blue;">1 uppercase character (A-Z)</mark>
  * <mark style="color:blue;">1 lower case character (A-Z)</mark>
  * <mark style="color:blue;">1 digit (0-9)</mark>
  * <mark style="color:blue;">1 special character</mark>
* <mark style="color:blue;">New password must be different from the previous one</mark>
* <mark style="color:blue;">User should not user the first part of his email address</mark>

<mark style="color:blue;">Password strength policy can be adjusted through the</mark> [<mark style="color:blue;">**“Configurations”**</mark>](/v2.0/superadmin/configurations/features.md) <mark style="color:blue;">interface.</mark>
{% endhint %}

## Two-factor authentication <a href="#id-1.16.x-accessingthebackoffice-two-factorauthentication" id="id-1.16.x-accessingthebackoffice-two-factorauthentication"></a>

Two-factor authentication (2FA) is a specific type of multi-factor authentication (MFA) that strengthens access security by requiring two methods (also referred to as authentication factors) to verify your identity.

{% hint style="warning" %} <mark style="color:orange;">We highly recommend that all Backoffice users activate 2FA authentication</mark>
{% endhint %}

### Activating 2FA for your account <a href="#id-1.16.x-accessingthebackoffice-activating2faforyouraccount" id="id-1.16.x-accessingthebackoffice-activating2faforyouraccount"></a>

{% hint style="info" %} <mark style="color:blue;">You will need to install an</mark> [<mark style="color:blue;">**Authenticator App**</mark>](https://www.pcmag.com/picks/the-best-authenticator-apps) <mark style="color:blue;">on your smartphone to follow this procedure (ex. Google Authenticator).</mark>
{% endhint %}

To set up the 2FA for your account, log in into the back office and click on the avatar menu. You will see in the menu the “Two-factor authentication” (figure 4 ).

<figure><img src="/files/VWRxiHFfcveOJIylCCp5" alt=""><figcaption><p>Figure 4</p></figcaption></figure>

Scan the QR-code with your [Authenticator App ](https://www.pcmag.com/picks/the-best-authenticator-apps)(not just a QR code scanner), this will generate a 6-digits code which will be displayed on your device. Enter the code in the “6-digit code” field and click “Add” (figure 5) to enable the two-factor authentication for your account:

<figure><img src="/files/HTzGUM7aTP1U96KJjONV" alt=""><figcaption><p>Figure 5</p></figcaption></figure>

### Logging in with 2FA <a href="#id-1.16.x-accessingthebackoffice-logginginwith2fa" id="id-1.16.x-accessingthebackoffice-logginginwith2fa"></a>

Once the 2FA is configured you will have 2 steps to login into the back office.

1. Enter your credentials
2. Fill in the 2FA 6-digit code generated to be able to login into the back office (figure 6).

<figure><img src="/files/GbGBVDJ2qIqZosLcFisV" alt=""><figcaption><p>Figure 6</p></figcaption></figure>

### Disabling 2FA authentication <a href="#id-1.16.x-accessingthebackoffice-disabling2faauthentication" id="id-1.16.x-accessingthebackoffice-disabling2faauthentication"></a>

You can remove the 2FA authentication on the back office by clicking on the “remove” button (figure 11), in the Two-factor authentication menu.

<figure><img src="/files/az723QvzeP8x2sPx9u7V" alt=""><figcaption><p>Figure 7</p></figcaption></figure>

## Remove Backoffice access <a href="#id-1.16.x-accessingthebackoffice-removebackofficeaccess" id="id-1.16.x-accessingthebackoffice-removebackofficeaccess"></a>

Please view the Administrator Management page to see how to delete an account.

## Related resources <a href="#id-1.16.x-accessingthebackoffice-relatedresources" id="id-1.16.x-accessingthebackoffice-relatedresources"></a>

**SBO:**

* [Platform KPI - Homepage](/v2.0/superadmin/platform-kpi-homepage.md)
* [Administrators management](/v2.0/superadmin/access-rights/administrators-management.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://features.scnd.com/v2.0/superadmin/accessing-the-backoffice.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.