> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/end-user-guide/the-self-service-portal.md).

# The self service portal

The Self-Service Portal is where you manage your own access — what you can reach, what you have asked for, how you sign in, and what you have been doing.

It is the counterpart to the admin console: an administrator grants access across the organisation, and you manage your own from here.

## The dashboard

Signing in opens the dashboard.

![The Self-Service Portal dashboard.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/aFIqIHGTDWUfNYUmukkt/assets/01.png)

Four cards summarise where you stand.

| Card                    | What it counts                                                                                                     |
| ----------------------- | ------------------------------------------------------------------------------------------------------------------ |
| Resources               | Everything you can reach, broken down into applications, public applications, databases and systems                |
| Access Requests         | Requests you have made                                                                                             |
| Pending Access Requests | Requests still waiting — split into those for you, those you raised for others, and those waiting on your approval |
| Pending Access Reviews  | Reviews assigned to you that are not finished                                                                      |

**Pending Access Requests** is the one to read carefully. *For Me* is what you are waiting on; *For Approvals* is what other people are waiting on **you** for. A number sitting there means someone's access is blocked on your decision.

Below the cards, two tabs.

**My Resources** lists what you can open, grouped as Applications, Public Applications, Systems and DB. Select one to launch it — SECUREpass signs you in, so there is no second password.

**My Sessions** shows your sessions, which is where a privileged session you started is listed.

Search and filter both work on the resource list once you have more than a screenful.

## Finding your way around

The left navigation holds the portal's sections.

| Section              | What it is for                                                    |
| -------------------- | ----------------------------------------------------------------- |
| Dashboard            | The overview above                                                |
| Access Requests      | Ask for access you do not have, and track what you have asked for |
| Authentication modes | Register and manage the ways you sign in                          |
| My Devices           | The mobile devices registered against your account                |
| Access Review        | Certify other people's access when a review is assigned to you    |
| Logs                 | Your own activity — what you did and when                         |

**Downloads** and **Support** sit at the bottom: the first for the SECUREpass Authenticator and any other client software your organisation publishes, the second for reaching your IT team.

A **Session ends in** countdown runs in the header throughout. It is your portal session, not your application sessions, and it resets as you work.

## My Devices

**My Devices** lists the mobile devices registered against your account — every device you have signed in with using the SECUREpass Authenticator.

![Your registered devices.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/QIsr9gTRZJJrFFcT11YH/assets/02.png)

Each row carries the device name, a masked device ID, the IP address the device last came from, its status, and the actions you can take.

| Column     | What it tells you                                                              |
| ---------- | ------------------------------------------------------------------------------ |
| Device     | The make and model as the device reported it                                   |
| Device ID  | The device's registration identifier, masked — the eye icon reveals it in full |
| IP Address | The address the device last connected from                                     |
| Status     | **Active** means the device may be used to sign in                             |
| Actions    | Delete the registration                                                        |

The status toggle is the quick control. Turning it off blocks that device from being used to sign in without removing it, which is what you want when a phone is mislaid rather than gone — you can turn it back on when it turns up.

### Pairing a device

**Generate QR** pairs a new device with your account.

![Scan to pair a device.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/Sjq199VA4X245GqPp92P/assets/03.png)

Select it, then scan the QR with the SECUREpass Authenticator on the phone you want to register. The device appears in the list once the scan completes. Close the dialog when you are done.

{% hint style="warning" %}
The QR is tied to your account and is short-lived. Treat it like a password while it is on screen — anyone who scans it is registering *their* device against *your* account. If you do not complete the pairing, close the dialog and generate a fresh one rather than leaving it open.
{% endhint %}

### Removing a device

The delete icon removes a device's registration.

![Delete registered device?](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/WGUzOHB3zf1b0uXUUIhp/assets/04.png)

The confirmation names the device and its IP address so you can be certain which row you are acting on, and it is explicit about what removal means: the record is deleted from your account, but if you sign in on that device again it re-registers automatically.

That is the distinction between the two controls worth remembering.

| You want to                                          | Use               |
| ---------------------------------------------------- | ----------------- |
| Stop a device signing in, but keep it on the account | The status toggle |
| Remove a device you no longer own or use             | Delete            |

Review this list occasionally. An old phone or a replaced handset should not stay on it — and a device you do not recognise at all is a reason to contact your IT team rather than simply delete it, because it means someone else completed a pairing against your account.

## Logs

**Logs** is your own activity trail — what was done on your account, when, and from where.

![Activity Logs.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/GC78MgO5k1SUbIL0Zqhg/assets/05.png)

Each entry records the module the action belongs to, the event, the date and time, the IP address it came from, the user name, and whether it succeeded.

| Column     | What it tells you                                                    |
| ---------- | -------------------------------------------------------------------- |
| Module     | The part of SECUREpass involved — *AuthenticationModes*, for example |
| Event      | What was done — *Verify* for an authentication attempt               |
| Date       | When it happened                                                     |
| IP Address | Where it came from                                                   |
| User Name  | Whose account it was on                                              |
| Status     | **Success** or a failure                                             |

Every column sorts. Above the table, **Search logs** filters by text and the **From** / **To** dates narrow the range, so you can go straight to a day something looked wrong. **Export** takes the filtered list out of the portal for your own records or to send to your IT team.

### Reading a single entry

The eye icon in the Actions column opens the full record behind a row.

![Log Description.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/yMMW4Qwtjcg0QszEgxOh/assets/06.png)

The description is held as an encoded block rather than plain text — the log is stored in the form it was written, not in a form that can be quietly edited afterwards. Close returns you to the list.

### Checking that an entry has not been altered

The shield icon next to it validates the entry's signature.

![XML Signature Validation.](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/TxzyMUTAyZhoxbzSK5hi/assets/07.png)

SECUREpass signs log records so that tampering is detectable. The check re-computes the signature and reports its verdict: a status badge, the validation status in words, a message explaining the result, the time the check ran, and any errors.

This is what makes the log usable as evidence. An entry that validates has not been changed since it was written; one that does not is telling you something about that record, and the message says what.

You would use this when an activity log is being relied on for something — an audit question, an access dispute, an investigation into a sign-in nobody recognises.

## Where each section is covered

Most of the portal has a page of its own in this guide.

| Section                   | Page                              |
| ------------------------- | --------------------------------- |
| Access Requests           | *Requesting access*               |
| Authentication modes      | *Managing your MFA*               |
| Access Review             | *Participating in access reviews* |
| My Resources              | *Your applications*               |
| Your profile and password | *Your profile and account*        |

My Devices and Logs are covered on this page.