---
title: Xperience Portal
related:
  - https://docs.kentico.com/documentation/developers-and-admins/deployment/deploy-to-the-saas-environment.md
  - https://docs.kentico.com/documentation/developers-and-admins/deployment/deploy-to-the-saas-environment/manage-saas-deployments.md
---

> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).

This page discusses **Xperience Portal** administration (available at <https://xperience-portal.com>). To prepare your project:

- [Access your Xperience Portal project](#xperienceportal-accessportal)
- [Provide access to the project for your team members](#xperienceportal-usersapp)
- Set up the resources ([hash string salt](#hash-string-salt-for-the-xperience-portal-project)  and [personal access tokens](#xperienceportal-pat)) needed before [deploying to the SaaS environment](https://docs.kentico.com/documentation/developers-and-admins/deployment/deploy-to-the-saas-environment.md)
- Select preferred timeslots for the [scheduled Xperience Portal project maintenance](#schedule-maintenance-of-xperience-portal-projects)

Use the **Dashboard** application to see the information about your project, including the region where your application is deployed (**service region**), **service plan**, **project expiration date**, **project code name**, and **project GUID**.

## Access Xperience Portal projects

To access Xperience Portal, you need to receive an invitation to a specific Xperience Portal project. Kentico sends the invitation to join the project to the project's primary contact whose contact information is provided to Kentico for the creation of the project. The primary contact can then [invite other users](#xperienceportal-invitenewuser) from Xperience Portal.

Access your Xperience Portal project:

1. Select the link in the email invitation.
2. Create a password. You will use the email and password to access all projects you were invited to.
3. Set up the Multi-Factor Authentication (MFA) in Xperience Portal:
   1. Scan the QR code with your preferred authenticator application.
   2. Enter the [one-time code](https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors#one-time-passwords) generated by your authenticator.
4. Save your [recovery code](https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors#recovery-codes). Copy the code displayed after entering the one-time code and store it somewhere safe, as it can be used to regain access to the portal in case you lose the device used as the second factor.

You now have access to your Xperience Portal project. If you encounter issues with accessing your Xperience Portal project, contact [Kentico support](https://www.kentico.com/services/support).

### Reset Multi-Factor Authentication

To regain account access if you cannot access the device or account used for Multi-Factor Authentication (MFA), you can reset the MFA using the [recovery code](https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors#recovery-codes) you received during MFA setup.

1. Sign in to Xperience Portal using your [recovery code](https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors#recovery-codes).
2. Expand the top-right user menu and select **Profile**.
3. Select **Reset multifactor authentication**.

After resetting the MFA, you will be signed out of the project. After you sign in again, you will be asked to set up the MFA again.

## Users

> **Info:** Xperience Portal and Xperience by Kentico projects operate on an entirely separate user base with different roles. This documentation section describes user management specific to Xperience Portal projects. For management of users within Xperience by Kentico projects, see [User management](https://docs.kentico.com/documentation/developers-and-admins/configuration/users/user-management.md).

Access to Xperience Portal is restricted to accounts associated with unique email addresses using [Role-based access control](https://en.wikipedia.org/wiki/Role-based_access_control) (RBAC) and is managed via [Auth0](https://auth0.com/) by Kentico. To learn more about roles in Xperience Portal and their privileges, see [Reference - Xperience Portal user roles](https://docs.kentico.com/documentation/developers-and-admins/saas/xperience-portal/reference-xperience-portal-user-roles.md).

Sign in as a user with the _Tenant Administrator_ role to access the **Users** application where you can:

- [Invite a new user to a project](#xperienceportal-invitenewuser)
- [Change a role of an existing user](#xperienceportal-changerole)
- [Remove a user from the project](#xperienceportal-removeuser)

![Users application](https://docs.kentico.com/docsassets/documentation/xperience-portal/Cloud_users_application.png "Users application")

> **Tip:** **Primary contact for a project**
>
> You can identify which user is the primary contact for a project by a _crown_ icon next to their _Role_ in the _Users_ listing.
>
> ![Primary contact in a Users listing](https://docs.kentico.com/docsassets/documentation/xperience-portal/primary-contact.png "Primary contact in a Users listing")

### Invite a new user to a project

1. Open the **Users** application.
2. Select **Invite user**.
3. Enter the email address of the user you want to invite.
4. Assign an [Xperience Portal role](https://docs.kentico.com/documentation/developers-and-admins/saas/xperience-portal/reference-xperience-portal-user-roles.md) to the user and select **Invite**.
5. Refer the invited user to [Access Xperience Portal for the first time](#xperienceportal-accessportal).

The user will receive an email with an access link to join a project in Xperience Portal. If the email address is not associated with an Xperience Portal account, the user will receive an invitation to create an Xperience Portal account.

### Change a role of an existing user

1. In the **Users** Application, select the **Edit** () icon of a user whose role you want to change.
2. Select the role from the **Role** drop-down menu. See [Reference - Xperience portal user roles](https://docs.kentico.com/documentation/developers-and-admins/saas/xperience-portal/reference-xperience-portal-user-roles.md) to decide which role to assign to the existing user.
3. Select **Save**.

### Remove a user from the project

1. In the **Users** application, select the **Remove** () icon of a user you want to remove from the project.
2. Confirm by selecting  **Remove**.

The user is removed from the project, and the [Personal access tokens](#xperienceportal-pat) associated with the account are revoked. The user does not lose access to other projects after removal from a specific project.

## Hash string salt for the Xperience Portal project

Set your .NET project [ hash string salt](https://docs.kentico.com/documentation/developers-and-admins/configuration/macro-expressions/macro-signatures.md#configure-the-hash-salt-for-macro-signatures) to the hash string salt available in the **Project info** section of the Xperience Portal project **Dashboard**.

> **Info:** Wait until the project infrastructure is created for the Hash string salt to be displayed in your **Xperience Portal** project **Dashboard**.

## Personal access tokens

Personal access tokens are used to authenticate API requests to Xperience Portal, for example, when you upload the deployment package to Xperience Portal.

Use the **Personal access tokens** application to **Create**, **Edit**, or **Revoke** tokens.

![Tokens in Xperience Cloud](https://docs.kentico.com/docsassets/documentation/xperience-portal/Cloud_Tokens.png "Tokens in Xperience Cloud")

### Create a new Personal access token (PAT)

1. In the **Personal access tokens** application, select **Create token**.
2. Enter the required data into the form:
   - **Display name** – is used to identify the token in the listing of tokens.
   - **Expiration date** – defines a period during which the token is valid. By default, a token is valid for one year.
   - **Permissions** – select permissions to associate with the currently created token.

     > **Info:**&#x20;
     >
     > - At least one permission has to be associated with a token.
     > - The **Deploy to QA** permission is suitable for most usual cases. The rest of the permissions are for [emergency deployments](https://docs.kentico.com/documentation/developers-and-admins/deployment/deploy-to-the-saas-environment.md).
3. **Create** the token.
4. Store the created token in a safe location before you proceed. After you close the dialog, the token string cannot be displayed again.

   > **Info:** **Lost personal access token strings** cannot be recovered. You will need to revoke the lost token and create a new one.

## Schedule maintenance of Xperience Portal projects

Kentico regularly provides updates to Xperience Portal, ensuring the required infrastructure for your projects is always up to date. The maintenance is split into two parts, during which certain Xperience Portal features become unavailable to ensure integrity of the update:

- **Scheduled maintenance** happens around once per month, usually on a Thursday. A _Scheduled maintenance_ is always announced in advance via email, [status page](https://status.xperience-portal.com/), and a banner in the Xperience Portal. During a _Scheduled maintenance_, Xperience Portal and internal infrastructure is updated and the following feature may become unavailable:
  - **Deployments** application and deployment package upload – the deployment API will respond with _503 Service unavailable_
  - **Channels and Domains** applications
  - **Monitoring → Outages** application
- **Customer infrastructure update** is carried out during the next update time slot after the _Scheduled maintenance_. Your preferred time slot for the update can be customized.
  - **Production** site availability may be affected

To minimize the impact on your projects, [users](https://docs.kentico.com/documentation/developers-and-admins/saas/xperience-portal/reference-xperience-portal-user-roles.md) with _Tenant administrator_ or _DevOps engineer_ roles can select a preferred time slot for the scheduled maintenance of the customer infrastructure:

1. Open the **System -> Update schedule** application.
2. **Edit schedule**.
3. Select the preferred timeslots for the scheduled maintenance.
   - The timeslots are in the UTC time zone.
   - Due to technical limitations, certain timeslots cannot be selected.
4. **Confirm** the selection.

Your preferred update schedule is now set. _Tenant administrators_ will be notified of any upcoming maintenance in advance via email. A notification bar with the date and time of the scheduled maintenance is displayed in Xperience Portal. Any user can also subscribe to updates on the [status page](https://status.xperience-portal.com/).

## Application monitoring

See [Manage SaaS deployments – Application monitoring](https://docs.kentico.com/documentation/developers-and-admins/deployment/deploy-to-the-saas-environment/manage-saas-deployments.md#application-monitoring).