Intralignes is the intranet portal reserved for Air France employees, both active and retired. It centralizes access to schedules, HR documents, pay slips, and business tools from a single interface. Successfully connecting to Intralignes requires understanding the authentication architecture set up by the company, which relies on multiple layers of security that often lead to blocks.
Shared password and SSO architecture: what happens behind the scenes during the Intralignes connection
Since the modernization of Air France’s IT infrastructure, the same Active Directory password is shared between Intralignes, GPNet, professional email, and other internal services. This single sign-on (SSO) system simplifies daily access but creates a side effect that many employees discover at their own expense.
Specifically, resetting the password on one of these portals simultaneously changes it for all the others. A change made via GPNet, for example, immediately renders the old password inoperative on Intralignes and on email. This mechanism explains a significant portion of the account blocks reported to IT support.
To avoid this trap, the best practice is to write down the new password before logging out of the current session, then test the connection to Intralignes Air France right afterward. The propagation time for the new password across all services can take a few minutes, which sometimes generates a temporary error window.
PingID authentication and iPN VPN: the two locks for remote access
On Air France’s internal network (fixed workstation at the airport, office at headquarters), connecting to Intralignes goes through the SSO without any additional steps. The situation changes radically when accessing remotely, from a personal computer or mobile device.
Two-factor authentication with PingID
PingID is the two-factor authentication device required for any off-network access. After entering the IPN identifier and password, the employee receives a push notification on the PingID app installed on their phone, or a temporary one-time code. Without validation of this second step, the Intralignes page remains inaccessible.
The level of requirement for PingID varies according to the category of personnel. Cabin crew (PNC), pilots (PNT), and ground agents do not all have the same access rights or verification frequency. A PNC stationed abroad will be prompted more frequently than a sedentary agent connected from their usual home.
Prior activation of the iPN VPN
The second lock is the iPN VPN, which must be activated before any attempt to connect to Intralignes from outside. As long as the VPN is not active, the portal pages simply do not display, which can be confused with a site outage.
The connection order is strict:
- Launch the iPN VPN and wait for the connection to be established (green icon or confirmation in the VPN client)
- Open the browser and access the Intralignes URL
- Enter the IPN identifier and password, then validate the PingID notification
Reversing these steps, particularly trying to open Intralignes before the VPN is operational, causes a silent failure. The browser displays a blank page or a network error message, without indicating that the VPN is the cause.
Resolving an Intralignes Air France account block
Despite following the procedure, blocks remain frequent. Three situations cover the majority of cases encountered by employees.
Expired or desynchronized password: the SSO password has a limited validity period. After this period, the account automatically locks. The reset is done via the HABILE portal, accessible even without a VPN. After resetting, wait a few minutes before testing access to Intralignes to allow propagation across all services.
PingID not paired or app uninstalled: changing phones without prior re-pairing of PingID cuts off access to two-factor authentication. The re-pairing procedure goes through IT support or through a workstation connected to the internal network, where PingID is not required.
Unstable VPN session: some public Wi-Fi connections (hotels, airports) block the protocols used by the iPN VPN. Switching to a mobile hotspot often resolves the issue.
- First, check that the VPN is active and stable
- Test the password on another SSO service (email, GPNet) to isolate the problem
- If the account remains blocked after resetting, contact IT support specifying the exact error message displayed
Difference between Intralignes and Easy RH Air France
A common confusion among employees is searching for features on Intralignes that actually belong to Easy RH, the portal dedicated to the administrative management of human resources. The two tools coexist but do not cover the same areas.
Intralignes provides access to flight schedules, internal communications, business tools, and operational information. Easy RH, accessible via a distinct URL, focuses on administrative procedures: pay slips, certificates, leave requests, updating personal contact information.
The login credentials are the same (IPN and SSO password), but the URL differs. An employee who cannot find their pay slips on Intralignes does not have a connection problem: they are looking in the wrong place. Checking the URL before contacting technical support avoids unnecessary waiting.
The security architecture (iPN VPN, PingID) applies to both portals in the same way for remote access. An employee who can connect to Intralignes can therefore access Easy RH without additional configuration, provided they use the correct address.
