La Poste brings together its digital HR services under two names that its agents encounter daily: MaBoxRH and GTm Extranet. The two interfaces coexist under the same address, maboxrh.laposte.fr, but their functional scopes do not completely overlap. Since the convergence initiated with the Smart Portal, the overall clarity has become even more complicated. Understanding what each layer covers helps avoid navigation errors and even security risks.
MaBoxRH Authentication: Virtual Keyboard and Accessibility Constraints
Connecting to MaBoxRH requires an HR identifier (IDRH) and a password entered via a virtual keyboard displayed on the screen. Each character must be clicked individually, a mechanism designed to block keystroke interception software.
On a desktop, the operation poses no particular difficulty. On a smartphone, the small size of the keys and the lack of native zoom significantly complicate input.
The portal also offers accessibility features for screen reader users (JAWS, NVDA), with a sound virtual keyboard for password entry. This level of adaptation remains rare on HR portals in the market, where accessibility efforts often limit themselves to enhancing contrasts.
For an agent with a visual impairment, the priority is to check the compatibility between their browser, screen reader, and virtual keyboard. Conflicts with certain older versions of JAWS have been reported by agents, with no publicly documented fix at this stage.
A comprehensive guide detailing the connection to MaBoxRH and GTA La Poste helps clarify the authentication steps according to the agent’s profile.
GTm Extranet and GTA Module: Real Scope Behind the Name
GTm Extranet does not have a standalone URL. It is the time and activity management module integrated into MaBoxRH, accessible only via maboxrh.laposte.fr. The official help page, however, bears the title “GTm Extranet,” which fuels confusion between the two.
The scope covered by this module is limited to the following functions:
- Consultation of individual schedules and tracking of leave balances (CA, RTT, CET)
- Viewing of submitted absences and validation by the hierarchical manager
- Access to hour counters and monthly activity summaries
Pay slips, certificates, contractual information, or personal data fall under MaBoxRH in a broad sense. Confusing the two is like looking for your pay slips in a scheduling tool.
Phishing on the MaBoxRH Space: Signals to Watch Before Entering Your Credentials
The coexistence of several internal portals at La Poste provides fertile ground for phishing attempts. Pages replicating the MaBoxRH interface regularly appear, with URLs that are close but different from maboxrh.laposte.fr. Any login page whose URL does not start exactly with maboxrh.laposte.fr should be considered suspicious.
The virtual keyboard adds an unexpected bias: an agent accustomed to clicking on visual keys pays less attention to the address bar than a user entering their password on a physical keyboard. Internal awareness campaigns remind users of a simple action: check the HTTPS certificate and the full URL before any authentication.
The risk is even greater on mobile. Browsers often truncate the display of the URL, hiding the portion of the domain that helps identify a counterfeit.
Smart Portal and Convergence 2026: A Concrete Status Report
Since 2024, La Poste has been working towards a rapprochement between MaBoxRH, GTm Extranet, and the Smart Portal. The stated goal is to provide a single entry point for all HR processes. Field feedback indicates that the convergence remains partial to date.
The Smart Portal functions as an aggregator of links to various internal services, including MaBoxRH. It does not replace the authentication system specific to MaBoxRH, and the data displayed in GTm Extranet remains hosted in the GTA module, not in the Smart Portal.
This bouncy architecture has a direct consequence: each redirection between portals increases the risk of disconnection, particularly on unstable mobile connections. Agents on the move, who check their schedules between two stops, regularly find themselves forced to re-enter their credentials on the virtual keyboard.
What Convergence Has Not Yet Unified
No real-time synchronization between the modules has been officially confirmed. The available data does not clarify to what extent changes made in one module propagate to others.
The mention “La Poste – All rights reserved 2026” on the MaBoxRH authentication page confirms that the portal is actively maintained this year. The open question is not about the disappearance of MaBoxRH, but about the pace at which its functions will be absorbed by a unified interface. La Poste has not communicated a public timeline on this matter.
