#WeAreUnited – Anywhere and anytime
United is everywhere #METROheroes are: Since 1 February 2021, United has been accessible to all employees via the internet. This means that every colleague with a personalized user account can now access United via private devices and exchange information on company topics on the social intranet - voluntarily, securely and from any location.
What to expect on United
- News: The latest news from within your business and exciting background information on developments in the industry.
- Proximity: On United, your colleagues around the world are just one click away. Here you have the opportunity to start conversations that transcend the borders between divisions and even countries.
- Knowledge: Digital and cross-location exchange of information and experiences.
- Cooperation: Efficient and transparent collaboration in teams and on various projects.
- Fun: Diverse employee activities such as competitions and surveys.
Getting started with United using the 2-factor authentication
Why do I need 2-factor authentication?
Authentication on the internet via a simple login with username and password no longer meets current security standards.
Hackers can easily find out your login details, for example when you enter your password after receiving a phishing e-mail or on an untrustworthy website. Other hazards include social engineering, virus attacks and insecure passwords.
Get your 2nd Factor in 5 steps
1. Install a common authentication app on your smartphone. This can be either a company device or a privately used device.
We recommend:
Google Authenticator
Microsoft Authenticator
Google Play and the Google Play logo are trademarks of Google LLC.
App Store® and Apple® are trademarks of Apple Inc., registered in the U.S. and other countries.
2. Open the page eac.metronom.com at a METRO workplace in the company network and search for the application ‘Employee Self Services’.
3. Enter your METRO username and password on the registration page. For this step, you need the access data from your personalised user ID. Now you should find yourself on the ‘Login Preference’ page. If not, select the shield icon in the menu bar (follow the arrow upwards in the picture, the icon is circled in yellow). Here you will see the menu item ‘2nd Factor Authentication Settings’. Click on the option ‘Code from Smartphone App’ (follow the arrow down in the picture).
4. A QR code appears, which you have to scan using the authentication app on your smartphone. Type the six-digit numeric code generated by your app directly into the field provided on the website. The numeric code is only active for a few seconds. If the code expires, the app generates a new code for you to enter.
5. If the authentication is successful, a confirmation appears on your monitor: you will see a green bar at the top of your screen.
Using the 2nd factor to log in to United
1. Open the URL metro-united.com or the United app on your company device without a connection to the METRO network (VPN) or on your private device - no matter if it is a smartphone, laptop or tablet.
United App
2. You will then be asked to enter a ‘One-Time-Password’ from your authentication app.
3. Take the smartphone that you have registered as a 2-factor device and open your authentication app. Here you will find the M|Identity Token.
Enter this 6-digit numeric code in the ‘One-Time-Password’ field in the METRO registration form.
4. When you log in to United in the future, the authentication service will decide whether you need to provide your 2nd factor. Usually, your Windows login data is sufficient for METRO.
Frequently Asked Questions
General
What is United?
United is our global internal social network and thus the central digital meeting point for METRO employees worldwide – a place to connect with colleagues, learn from each other´s expertise and create shared experiences. It is our intranet where you find the latest corporate news, digitally meet colleagues and exchange ideas. It’s interactive and just as diverse as our #METROheroes are.
In short: United is a place to connect.
What does #WeAreUnited – Anywhere and anytime mean?
Our social intranet United keeps #METROheroes always well connected and up to date. And this is now possible from anywhere – because you can log in to United via private devices such as your laptop, tablet, or smartphone. Now every METRO colleague will be able to take part in the lively exchange of information on current company topics - securely, flexibly, and voluntarily.
What are the benefits of using United on private devices?
Up until now, the majority of METRO's almost 100,000 employees worldwide did not have direct access to the social intranet because it was only available within the internal METRO network and only via corporate devices. That is changing now: Every METRO colleague will be able to log in to United via his or her private device such as laptop, tablet, or smartphone and take part in the lively exchange of information on current company topics – securely, flexibly, and voluntarily. This opens the way to more interaction, more participation and more togetherness across all levels, subsidiaries and countries.
Which users can access United on private devices?
Every METRO employee can log in to United via his or her private device such as laptop, tablet, or smartphone at metro-united.com or using the United App (available in the common app stores). The login process works with your METRO Windows login data and under consideration of the 2-factor authentication. The access will only be possible with personalised user accounts. Functional accounts will be classified as guest users, they will not have access from private devices. Thus, access as a guest user with a private device won’t be possible. The use of United with company devices is of course still possible. Access as a guest user with a company device is also still possible.
What sort of netiquette is there on United?
A netiquette was developed for United in order to define the basic rules of cooperation and communication and to give recommendations for the practical day-to-day use of the internal social network. All employees are expected to observe these. The netiquette is available for everyone in United. As a general rule, every user is responsible for the content published under his or her name.
Technical aspects
How can I access United with my private device?
At metro-united.com or using the United App you can log in from your own devices with your personal METRO Windows login data and under consideration of the 2-factor authentication. You can download the United app from the common app stores. Access will only be possible with a personalised user account. Functional accounts will not have access from private terminals.
Who can I contact if I do not have a personalised user ID?
Every METRO employee has a personalised user ID. If you do not know yours, please contact your supervisor or the IT hotline.
I do not have my own METRO work/company computer. How should I register for the two-factor authentication?
Every employee who does not have his own company laptop can register on a generally used computer in the store (e.g. at the fish counter). These are usually registered as functional users. However, it is possible to register for United with their personalised user ID using the "Switch User" function.
Will United have access to my personal information when I use it from my personal device?
No, it is impossible that data on the private terminal device can be read out by accessing United on private devices. Access to photos is possible if the user has given his or her approval after being requested to do so.
Why do I need a 2-factor authentication?
Authentication on the Internet via a simple login with username and password no longer meets the required security standards. Hackers could gain knowledge of your password. For example, if you entered your password after receiving a phishing mail or on untrusted websites. Other reasons could be social engineering, virus attacks, insecure passwords and much more.
Can I use my personal smartphone for the 2-factor authentication?
Yes! You can use any device which is used by YOU PERSONALLY ONLY! No matter if it's your own business mobile or your private mobile - just make sure NOT to share it to someone else. There is no business data exchanged with your mobile and the company will also not be able to get access to your mobile when registering for 2FA.
What “Authenticator App” should I use?
Any "Authenticator App" that follows the common TOTP (time-based one-time password) standard can be used.
Where can I get the “Authenticator App” from?
Depends on which device you want to use for your "Authenticator App" - for Android devices you may search for one of the mentioned Authenticator Apps on the Google Play Store. If you are using an Apple iPhone just search for them on the App Store.
Our registration application is currently tested with the following "Authenticator Apps":
Google Authenticator
Microsoft Authenticator
To what extent is the issue of data protection clarified for the usage of United on private devices?
The consent of the data protection commissioner has been obtained. The regulations of the existing regulations for United remain valid. United stores 3 cookies on the device. United does not store any other data on the device unless the user actively downloads data (for example, images or forms) from United. United does not access any data on the device unless the user actively uploads data (for example images). No user analytics data is stored on or downloaded from the device.
To what extent has the issue of IT security been clarified for the usage of United on private devices?
The approval of the IT Security of METRO AG has been obtained. The METRO firewall will be opened so that access to United with METRO credentials is possible from the outside. The system itself therefore remains behind the firewall and is not accessible to users who do not belong to METRO. United functions as a self-contained system, which means that all content and functions stored in United are available. Links within United are accessible. All links leading to other internal systems (e.g. SharePoint, Portal, Digital Workplace, etc.) can only be successfully accessed if the target system is also accessible via the Internet.
Let's say an employee is accessing United for the first time. How is acceptance of the privacy policy and terms of use ensured?
When United is called up, the texts Privacy Policy and Terms of Use are displayed. The user then has to click two checkboxes. Once the conditions have been accepted, the user is not asked again. This is the normal procedure for the initial registration and is independent of the possibility of use via private devices. If you have already used United with the personalised user via official devices, this process is not triggered, but you are directly "in".
Is there a United app for private devices?
The app for United is available in the Apple App Store. This app can be installed free of charge on private and business mobile phones. For Google Play, the United App is currently being reviewed. As soon as it has been approved, the app can be downloaded and installed.
This app can be installed free of charge on private and business mobile phones. The app is designed to connect automatically against the United environment. When logging in, a 2FA is required in addition to the personal username and password. After logging in, the app saves 3 cookies on the device. As long as these three cookies are valid, it is not necessary to enter the username and password again.
Contact
Still open questions?
Then please contact the IT support in your country.