The GTM extranet (also known as MaBoxRH) is the internal HR portal of the La Poste group. It allows agents to check their leave balances, submit absence requests, and access various documents related to their professional life. From a workstation connected to the La Poste internal network, accessing this space adheres to network and security constraints that differ significantly from accessing it from a personal computer.
La Poste Internal Network: What the Proxy Changes for GTM Connection
On the internal network, each request to a website passes through a corporate proxy. This proxy filters allowed URLs, blocks certain ports, and applies specific certificate rules to the group’s infrastructure. When an agent tries to reach maboxrh.laposte.fr, DNS resolution and SSL certificate validation go through these intermediate layers.
You may also like : Discover how to easily read manga online with Wakascan
In practice, this means that browsers not recognized by the IT department may silently fail when loading the authentication page. Internet Explorer in compatibility mode or a browser whose certificate store is not synchronized with the internal directory often generates a certificate error or a blank page. The recommended browser on internal workstations remains the one deployed by the IT department, usually a managed version of Chrome or Edge.
A rarely documented point concerns the session timeout. On the internal network, the GTM session expires after a few minutes of inactivity, which forces frequent reconnections. This behavior is related to the proxy’s timeout policies, not the application itself. Agents who discover this phenomenon after a few days of use mistakenly believe that their account is blocked.
Recommended read : How to Easily Contact the Team of a Web Blog
To access the La Poste GTM extranet without encountering these blocks, it is necessary to check the browser settings and the proper configuration of the proxy on the workstation used in advance.
Authentication on MaBoxRH: Virtual Keyboard and HR Identifier
The MaBoxRH login page uses a virtual keyboard for password entry. This security device prevents keyloggers from intercepting keystrokes, but it often confuses new users. The numbers on the keyboard appear in a random order with each load.
For agents using a screen reader (JAWS, NVDA), an audio version of the virtual keyboard is available. It can be activated via the “Activate Sound” button located just before the keyboard. Navigation between the numbers is then done using the Tab key, and each number is confirmed by pressing Enter.
HR Identifier and First Login
The login identifier is the HR identifier assigned to each agent upon their integration. New arrivals receive this identifier with a delay that varies depending on synchronization with the internal directory. As long as this synchronization is not effective, the login attempt returns an error, even if the identifier has been communicated by the manager.
- Check that the HR identifier has been activated by contacting the local HR manager.
- Enter the URL maboxrh.laposte.fr directly in the address bar or via a bookmark, never through a search engine, to avoid phishing.
- In case of forgetting the secret answer or inaccessible email, use the dedicated reset form on the login page.
SAFIR Support: The Priority Channel in Case of Blockage on the Internal Network
When an account is suspended or a blockage persists from an internal workstation, SAFIR support is the priority channel, before the email [email protected]. This distinction is rarely mentioned in general guides, yet it significantly changes the resolution time for the issue.
SAFIR has direct access to synchronizations with the internal directory and session rights. A ticket sent by email to the standard support follows a longer path, as the team must then relay the request to the network administrators. On an internal workstation, where the blockage is often related to session rights or directory synchronization issues, going through SAFIR shortens the procedure.
Distinguishing a Network Problem from an Account Problem
Before contacting support, a few quick checks can help identify the source of the blockage:
- If the login page does not display at all, the problem is likely network-related (proxy, DNS, browser).
- If the page displays but the identifier is rejected, the problem is account-related (directory synchronization, expired password).
- If the login succeeds but the session immediately disconnects, it is a proxy timeout or a certificate conflict.
This distinction allows providing SAFIR support with relevant information from the first call and obtaining a quicker resolution.
Pay Slips and Confusion with the Salary Vault
A frequent source of tickets on the internal network concerns the search for pay slips in MaBoxRH. The GTM portal manages leave, HR requests, and managerial validation, but pay slips are hosted on an external salary vault (myPrimobox or MyPeopleDoc depending on the group’s entities).
From an internal workstation, accessing these vaults may require separate authentication and passing through another network circuit. Agents who expect to find their pay slip in MaBoxRH waste time searching for a section that does not exist on this portal. The management of pay documents and leave management are two separate systems, even though both concern salary life within the La Poste group.
The most reliable reflex remains to type the URL of the desired service directly into the address bar of the browser managed by the IT department, keeping each portal in a separate bookmark. This simple habit avoids both misdirection between platforms and the phishing risks associated with search results.