Signing In

Medipal supports two ways of signing in to the web app: an email address with a password, and single sign-on with a Microsoft work account. Your administrator decides which options are enabled on your instance.

Sign in with email and password

1. Open the web app and enter your Email Address and Password.
2. Optionally tick Remember Me to stay signed in on this browser.
3. Select Sign In.

If multi-factor authentication (MFA) is required for your account, you are asked for a verification code before you reach the home page (see below).

Sign in with Microsoft

If your organisation uses Microsoft Entra ID (Azure AD), the sign-in page shows an Or sign in with section with a Microsoft button.

1. Select the Microsoft button.
2. Sign in with your work account in the Microsoft window and approve the request.
3. You are returned to Medipal and signed in.

Your Medipal account is matched to your Microsoft identity by your organisation's configuration. If you see an access error after the Microsoft step, your account may not yet be provisioned in Medipal; contact your administrator.

Multi-factor authentication

MFA adds a one-time code from an authenticator app to your password. Depending on your instance policy it is either required for everyone or optional.

Setting up MFA

The first time MFA is required (or when you enable it yourself), you see the Set Up Multi-Factor Authentication page:

1. Install an authenticator app on your phone (for example Google Authenticator, Microsoft Authenticator or Authy).
2. Scan the QR code shown on screen. If you cannot scan, choose Can't use QR code? and copy the secret code into the app manually.
3. Enter the current 6-digit code from the app and select Enable Multi-Factor Authentication.

You are then taken to a confirmation page and can continue to the app.

Signing in with MFA

After entering your password (or completing Microsoft sign-in) you are asked for the 6-digit code from your authenticator app. The code changes every 30 seconds; if a code is rejected, wait for the next one and try again.

Resetting MFA

From User Profile → Security you can Reset Multi-Factor Authentication. This removes the current authenticator pairing and starts the setup again. If you have lost access to your authenticator app, an administrator must reset MFA for you.

Forgotten and expired passwords

• Forgot Password? on the sign-in page asks for your email address. If an account exists, an email with a reset link is sent. Follow the link to enter and confirm a new password.
• If your administrator has forced a password change, you land on Update Your Password after signing in. Enter your current password and a new one, or choose Log Out Instead.
• You can change your password at any time from User Profile → Security.

Your profile

User Profile (from the avatar menu) has four tabs:

Tab	What it contains
General	Email, first and last name, phone number, and preferences: interface Language and Theme (light, dark or system).
Security	Password change and MFA status with enable or reset actions.
Devices	Mobile devices registered to your account, with model, OS, app version and status, plus Authenticate Device for pairing.
My Questionnaires	Questionnaires you are enrolled in yourself and the answers you have submitted, with Answer now when a slot is open.

The interface language only affects the web app; questionnaire languages are configured per folder and questionnaire.

Sessions and signing out

Use Sign out from the avatar menu to end your session on the current browser. Administrators can see all active sessions in Admin Panel → Access → Current Sessions (user, sign-in method, device and expiry) and can revoke a session, which signs that user out immediately.

Troubleshooting

Symptom	Likely cause	What to do
"Invalid credentials" although the password is correct	The account is inactive or locked, or the email has a typo	Check the email address; ask an administrator to verify the account status.
Verification code is rejected	Phone clock is out of sync, or an old code was entered	Enable automatic time on the phone and enter the newest code.
Microsoft sign-in succeeds but Medipal shows an access error	The account is not provisioned or not mapped in Medipal	Ask your administrator to create or link your account.
Password reset email never arrives	The address is not registered, or the email was filtered	Check spam; confirm the address with your administrator.
Signed out unexpectedly	The session expired or was revoked by an administrator	Sign in again; if it repeats, ask the administrator to check the session list.