> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-authentication/authenticate-users-through-the-customer-support-portal.md).

# Authenticate users through the Customer Support Portal

When you add users to your Customer Support Portal account, users are sent an invitation to join. After they accept, users can access Cortex Gateway and tenants, but they cannot view any tenants in the Gateway and cannot view any data in the tenant unless they are assigned a direct role or user group role. Only Account Admins can make any changes in Cortex Gateway.

**Keep in mind the following**:

* You must be assigned the Super User role in the Customer Support Portal to add users in the Customer Support Portal.
* The first Super User who logs into Cortex Gateway is automatically assigned the Account Admin role and has access to the tenant. The user who activates the Cortex XDR tenant will also be assigned the Account Admin role (if there is no current Account Admin role) or Instance Admin (if there is an existing Account Admin role) and will have access to the tenant. Any additional users including Super Users need to be assigned access to the tenant.
* To log in to Cortex XDR through the Customer Support Portal (CSP), users must be assigned the Cortex User role in CSP. If this role is not assigned, the user will be unable to log in via the CSP and must use the Single Sign-On (SSO) login method instead.

When users log into Cortex Gateway or the tenant they are prompted to sign into the Customer Support Portal using their username and password. This is the default method of authentication.

{% hint style="info" %}

### Note

After users are added to the Customer Support Portal and they accept the invitation, you can manage them in Cortex Gateway or the Cortex XDR tenant.
{% endhint %}

How to authenticate users through the Customer Support Portal

1. Add users to your Customer Support Portal account, by logging into <https://support.paloaltonetworks.com/> and doing one of the following:
   * In your Customer Support User Account, create users.
     1. On the left-hand side menu, select **Members** → **Create New User** .
     2. Add the member details and click Submit.

        An email is sent to the user which must be accepted within seven days.

        For more detailed information including how to reset the invitation, see [How a Super User Creates a New Customer Support Portal User Account](https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNPCA0).
   * Send an Account Registration Link.

     A registration link is generated by a Customer Support Portal account Super User and shared with users who need to create a login for access to the account.

     1. On the left-hand side menu, select **Account Management** → **Account Details**, and click **User Access**.
     2. In the **Account Registration** link, click **Create**.
     3. Copy and send the link to the users you want to add.

        When clicking the link, users are required to enter their registration details and submit them to the Customer Support Portal.

        After users have submitted their details, the Super User receives a notification that a user has been created.

     For more information about how to generate, regenerate, or disable a link, see [How to Use the Account Registration Link](https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNXCA0).
2. Log in to [Cortex Gateway](https://cortex-gateway.paloaltonetworks.com/accounts) .

   After the user accepts the invitation, you see the added users. You must assign a role to the user directly or add them to user groups in Cortex Gateway or in the Cortex XDR tenant.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x/onboard-cortex-xdr/deployment-steps/set-up-authentication/authenticate-users-through-the-customer-support-portal.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.