Logging in

First-time login

Milestone recommends that you use a secure connection when you manage your user credentials.

  1. In the address bar of your web browser, enter the internet address that your system administrator has given you. Example: http://1.2.3.4:8081 or https://1.2.3.4:8082. The login page is displayed.
  2. Optional. To change language, click the default language in the upper right-hand corner.
  3. Select one of these authentication methods :
    • Basic user - Select this option to log in as a basic user. Basic users are defined by your system administrator in XProtect Management Client. To log in as a basic user, you must change your temporary password first:
      1. In the User name and Password fields, enter the login credentials that your system administrator has given you.
      2. Click Log in. The Change password dialog box appears.
      3. Click Continue to open a new browser window.
      4. Follow the instructions in the Set a new password wizard and save your new password.
      5. After you have saved your changes, close the current browser window and log in to XProtect Web Client using your new password.

      If your system administrator forces you to change your password on the next login, follow the steps listed above to log in.

    • Windows user - Select this option to log in with your Windows user credentials.
      1. In the Domain\User name and Password fields, enter your Windows user credentials.

        Windows user credentials are specific to a machine or a domain.

      2. Click Log in.
    • Log in with [Name of an external IDP] - Select this option to log in with an external IDP. For more information, see External IDP and XProtect Web Client (explained).
    • Optional. If your system administrator has set up two-step verification for your user account, you are asked for a verification code, which the system sends to your email address. You must use this verification method on each login. If in doubt, ask your system administrator for the email address.
      1. Open your email program and make a note of the numbers.
      2. Enter the code on the XProtect Web Client login page and tap Log in.

      If you do not use the verification code within a specific period of time (the default period of time is five minutes), the verification code times out. You can then request a new code on the screen where you enter the code.

      If you exceed the number of allowed code entry attempts (the default number is three), you will be blocked from making more attempts. In that case, you must log out of XProtect Web Client and log in again.

When you are logged in to XProtect Web Client and leave the browser tab inactive for a period of time longer than five minutes, your session will time out, and you will be logged out from the application automatically.

Change password

To be able to manage your user credentials, you must use XProtect VMS 2021 R1 or later.

Changing your password often increases the security of your XProtect VMS system. If you choose to log in as a basic user, you can change your password whenever you want to. In contrast, if you choose the Windows authentication method, only your system administrator can change your password.

To change your password, go to the login page of XProtect Web Client:

  1. Select Basic user.
  2. Click the Change password link to open a new browser window.
  3. Follow the instructions in the Set a new password wizard and save your new password.
  4. After you have saved your changes successfully, close the current browser window and log in to XProtect Web Client using your new password.

If you have forgotten your current password, you must contact your system administrator. The system administrator will force you to change your password on your next login.

If you have made many unsuccessful login attempts, your account will be locked out. You can either wait for the lockout time to expire or contact your system administrator. The administrator can enable your account again and, in addition, may force you to change your password on the next login.