Accessing IntraParis from a workstation outside the municipal network remains the most frequent point of friction for agents of the City of Paris. Between the Nomades portal, multi-factor authentication, and the restrictions of the IT charter, remote connection requires precise configuration that most guides overlook.
Multi-Factor Authentication and the Nomades Portal: The Security Layer to Master
Since 2023, the City of Paris has been gradually rolling out mandatory multi-factor authentication (MFA) for remote access via Nomades and IntraParis. So-called “privileged” accounts (IT department, finance, sensitive HR) were the first to be affected, as part of the Information Systems Security Plan presented in the City Commission on January 30, 2023.
Related reading : How to Enjoy Movies and Series Online Without Creating an Account?
In practical terms, MFA adds a step after entering the usual credentials. The agent receives a temporary code on a registered device or validates the connection via a dedicated application. Without this validation, access to the portal is blocked, even with a correct username/password pair.
We recommend registering the validation device as soon as you receive your Nomades access, without waiting for the first remote connection. An agent who discovers the MFA procedure while teleworking, without access to the internal network to complete enrollment, finds themselves blocked with no immediate recourse.
Related reading : How to Stop CNED Courses Mid-Year: Steps and Practical Tips
To access my Intraparis agent account in the City of Paris while mobile, going through the Nomades portal is the only authorized route. Any attempt to bypass this via a third-party VPN or an unlisted browser results in a session block.
IT Charter Restrictions: What Agents Are Not Allowed to Do
The charter for the use of IT and digital resources of the City of Paris, updated and published on Paris.fr on November 9, 2022, sets explicit prohibitions that many agents underestimate. The use of personal email accounts (Gmail, personal Outlook) and public storage services (Dropbox, Google Drive) is prohibited for transferring or storing documents from IntraParis or Nomades.
This restriction aligns with the City of Paris’s adherence to the national “Cloud at the center” doctrine and the cybersecurity obligations supported by the Cybermalveillance.gouv.fr initiative. The goal is to prevent any leakage of HR, payroll, or administrative management data to non-sovereign servers.
In practice, an agent who sends their payslip to their Gmail address to print it at home is violating the charter. Disciplinary sanctions remain rare, but the traceability of outgoing flows allows the IT department to identify these transfers.
Reflexes to Adopt to Stay Compliant
- Download HR documents directly from IntraParis to the work station or via Nomades, never on an unregistered personal device
- Use exclusively the professional @paris.fr email for any exchange containing documents from the portal
- Never save your IntraParis credentials in a personal password manager or in the browser of a shared computer
Cybersecurity Awareness and Decrease in Connection Incidents
An internal report on teleworking covering the period 2021-2023, presented to the social administration committees in early 2024, indicates a marked decrease in security incidents related to IntraParis access since the generalization of mandatory awareness sessions. These sessions primarily target new agents and frontline managers.
Phishing remains the main threat. Campaigns of fake emails mimicking the IntraParis login page led to password compromises before the implementation of MFA. With two-factor authentication and systematic training, the number of compromised accounts has significantly decreased.
We observe that trained agents identify phishing attempts more quickly. A legitimate email from IntraParis always comes from a @paris.fr domain and never asks for password re-entry via an external link.
IntraParis Connection While Mobile: Workstation Configuration and Compatible Browsers
The Nomades portal works exclusively on browsers approved by the IT department. Using an outdated or unsupported browser causes certificate errors that block authentication even before entering credentials.
On a work station configured by the IT department, the security certificate is pre-installed. On an authorized personal device (within the framework of teleworking), the agent must follow the procedure for installing the City of Paris root certificate, available on the Nomades portal itself during the first connection.
Verification Points Before a First Remote Connection
- Check that the browser is up to date (versions older than two major updates are often rejected)
- Ensure that the MFA validation device is charged and accessible before starting the connection procedure
- Disable any third-party proxy or VPN that could interfere with the secure tunnel of Nomades
- Check that the workstation’s clock is synchronized, as a time difference of a few minutes is enough to invalidate MFA codes
Email and HR Services Available via Nomades
Once connected, the agent accesses professional email, HR management services (leave requests, payslips, certificates), and internal collaborative tools. The IntraParis email remains the official channel for any communication related to the agent’s administrative management.
The portal also consolidates institutional information, service notes, and request forms that previously required a physical visit to the departments.
The initial configuration of the agent account, including MFA enrollment and certificate installation, usually takes less than half an hour on a properly prepared workstation. An agent who encounters persistent blocking after these checks should contact IT support via internal messaging, specifying the exact error message displayed by the Nomades portal.