Skip to main content

Signing in to the XClarity One on-premises portal

When using XClarity One on premises, you can sign in to the portal from any system that has network connectivity to XClarity One virtual appliance.

Note
If five consecutive sign-in attempts fail within a 15-minute period or if consecutive sign-in attempts occur too quickly (within 1 second), your user account is locked for 60 minutes.

Web sessions​

Each user can have up to five web sessions. When signing in to the sixth session, the oldest session is automatically ended.

A web session expires after 4 hours of active use or after 30 minutes of idle time. When a web session expires, you are signed out automatically and must sign in again to continue your work.

You can view a list of active web sessions and sign out of any unfamiliar sessions. Click Account settings from the user-account drop-down menu in the upper-right corner, and then click Account security > Device activity.

Note
  • If your web browser is set up to use a popup blocker, configure the popup blocker to allow the xclarityone.lenovo.com website.
  • Ensure that you are using one of the following supported web browsers.

    • Chrome 111 or later

    • Microsoft Edge 111 or later

    • Firefox 112 or later

    • Safari 16.4 or later

Signing in to the portal​

XClarity One requires two-factor authentication by default using user credentials and a one-time passcode from an authenticator application.

To sign in to the XClarity One portal, point your browser to the hostname or IP address of the XClarity One virtual appliance that you set up during installation. If a DHCP server is set up in the same broadcast domain as XClarity One, use the hostname or IPv4 address that is displayed in the XClarity One virtual-appliance console.

https://{hostname_or_IPv4_address}/

For example, https://xc1.acme.com or https://192.0.2.10

Local users
When you sign in for the first time, you are prompted to set up your user account.
  1. Sign in using your username and the temporary password that was set when your user account was created. If you do not know the temporary password, ask your user administrator.

  2. Read and accept the End User License Agreement and the Lenovo Privacy Statement.

    You can view these agreements later by clicking About from the user-account drop-down menu in the upper-right corner of the XClarity One portal.

  3. Configure your password.
    It is recommended that you use strong passwords of 16 or more characters. By default, passwords for local user accounts must have 8 – 256 characters, including one or more uppercase and lowercase alphabetic characters, numbers, and special characters. Consider the following recommendations when creating passwords.
    • Do not use known passwords obtained from earlier breaches, leaks, or hacks.
    • Do not use dictionary words.
    • Do not use context-specific words, such as the name of a service, an email address, or derivatives thereof.
    • Do not use more than two repetitive or sequential characters (for example, aaa or 123abc).
    • Do not reuse any of the last five passwords.
  4. Configure your account settings, including your first and last name.
  5. Set up an authenticator application on a personal device and connect it to XClarity One to obtain the one-time passcode (OTP) that is needed each time you sign in. You can manage your multi-factor authetnication settings from your account preferences at any time by clicking Account settings from the user-account drop-down menu in the upper-right corner of the XClarity One portal. The following authenticator applications are supported.
    • FreeOTP
    • Google Authenticator
    • Microsoft Authenticator
  6. Sign in using your new user credentials and one-time passcode.
Corporate users

After signing in to your company’s identity provider, you can access XClarity One portal without providing additional credentials.

The sign-in dialog shows different options according to your authentication settings. When your LDAP server is set up, you can click the Login with LDAP link to sign in with your corporate user account. When your external IDP is set up, you can sign in with your corporate user account, or click the Return to local authentication link to sign in with your local user account.

Note
Multi factor authentication (MFA) using a one-time passcode is imposed by XClarity One for every user if your external IDP is not set up with MFA (does not have the “amr” claim with value “mfa” set in the JWT tokens).

You can update your personal information, change your password, and manage your authentication applications by clicking Account settings from the user-account drop-down menu in the upper-right corner, and then clicking Account security > Signing in.

Terms and conditions​

When you sign in for the first time, you are asked to agree to the End User License Agreement and the Lenovo Privacy Statement. Ensure that you read these agreements in their entirety before clicking Accept. You must accept the statements to sign in to XClarity One.

If you already agreed and want to withdraw from your agreement, contact XClarity One support using the Contact Us webpage.