> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xpanse/users-and-roles/user-authentication/authenticate-users-through-the-customer-support-portal.md).

# Authenticate users through the Customer Support Portal

When you add users to the CSP account, they are added as users in [Cortex Gateway](https://cortex-gateway.paloaltonetworks.com/accounts) and the tenant. Cortex Gateway is a centralized portal for managing users, roles, and tenants. By default, users have access to Cortex Gateway, but cannot make any changes in Cortex Gateway unless they are Account Admins and cannot access a tenant until they are assigned a role or group role.

{% hint style="info" %}

### Note

You must be assigned the Super User role in the CSP to add users in the CSP.

A Super User is automatically granted the Account Admin role, which enables them to manage tenants, users, and roles in Cortex Gateway.
{% endhint %}

When users log in to Cortex Gateway or the tenant (provided they are assigned a role) they are prompted to sign into the CSP using their username and password. This is the default method of authentication.

{% hint style="info" %}

### Note

As soon as users are added to the CSP, you can manage users, roles, and user groups in Cortex Gateway or in the Cortex Xpanse tenant. We recommend managing roles and user groups in the tenant as you may want different roles and user groups for each tenant.
{% endhint %}

1. Add users to your CSP account, by logging into <https://support.paloaltonetworks.com/> and doing one of the following:
   * Create a new Customer Support User Account.
     1. On the left-hand side menu, select **Members** → **Create New User** .
     2. Add the member details and click Submit.

        An email is sent to the user which must be accepted within seven days.

        For more detailed information including how to reset the invitation, see [How a Super User Creates a New Customer Support Portal User Account](https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNPCA0).
   * Send an Account Registration Link.

     A registration link can be generated by a Support Portal account Super User and shared with users who need to create a login for access to the account.

     1. On the left-hand side menu, select **Account Management** → **Account Details**, and click the User Access tab.
     2. In the Account Registration link, click Create.
     3. Copy and paste the link to the users you want to add.

        When clicking the link, users are required to enter their registration details and submit them to the CSP.
     4. After users have submitted their details, the super user receives a notification that a user has been created.

     For more information about how to generate, regenerate, or disable a link, see [How to Use the Account Registration Link](https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNXCA0).
2. Log in to [Cortex Gateway](https://cortex-gateway.paloaltonetworks.com/accounts).

   You can view the users in your account by selecting **Permission Management** → **Permissions**. You should see the following users:

   * Account Admin Users

     CSP Super Users automatically have Account Admin permission. These users can view and make any changes in Cortex Gateway.
   * Users with No-Role

     These users cannot log into the tenant until either you assign them to a tenant, or you create a role or user group role in Cortex Gateway or in the tenant.

   When users log into Cortex Gateway or the tenant directly, they are required to sign into the CSP using a username and password. For more detailed information about how to create users in the CSP, see [How a Super User Creates a New Customer Support Portal User Account](https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNPCA0).


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xpanse/users-and-roles/user-authentication/authenticate-users-through-the-customer-support-portal.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.