The Partage portal of the Strasbourg academy centralizes authentication for webmail, but also for I-Prof, DT-Ulysse, or the educational space. A blockage in the messaging system can therefore signal a global authentication issue, not just a problem with the mailbox. Understanding the architecture behind this mechanism allows for quicker diagnosis and configuration of devices without guesswork.
Partage Session Token and Persistence Depending on Network Context
The Partage portal generates a session token with each successful authentication. This token has a variable lifespan depending on whether the connection is made from the institution’s internal network or from a home or mobile network.
On the institution’s network, the session persists longer because the portal recognizes the academic IP range. In contrast, from an external network, the token expires more quickly and triggers an OTP request (one-time password) if this layer has been activated on the account.
A desktop browser retains this token as long as the session cookie remains valid, which explains why one can navigate between webmail and the educational space without re-authenticating. On mobile, browsers apply stricter cookie cleaning policies, and the session often drops. That’s why we recommend using a native IMAP client on smartphones rather than the mobile webmail.
To access AC Strasbourg messaging frictionlessly from outside, the first step is to ensure that recovery information (phone number, secondary email address) is correctly filled in on the portal, before getting blocked by the OTP.
IMAP Configuration on Native Client: Server Settings and Common Pitfalls
Configuring an email client using IMAP completely bypasses the web portal. Outlook, Thunderbird, the iOS Mail app, or any compatible Android IMAP application connect directly to the academic server. Authentication then occurs through a username/password pair stored in the client, without a session token or OTP.
The most common errors during configuration:
- Entering only the first name.last name without the full domain. The server systematically rejects a truncated username.
- Confusing the academic password with that of the student/family ENT. These are two distinct systems with separate authentication bases.
On Thunderbird, automatic configuration detection often fails for @ac-strasbourg.fr accounts. We recommend forcing manual configuration from the first screen rather than waiting for the autodiscovery timeout.
Differentiating Academic Messaging, ENT, and Educational Space in Strasbourg
The confusion between these three accesses generates the majority of support tickets. The ENT (digital workspace) is intended for students and families. The academy’s educational space uses the same credentials as the academic messaging, as specified on the official authentication page.
Specifically, if a staff member cannot log in to webmail via courrier.ac-strasbourg.fr, they will also not be able to access the educational space (pedagogie.ac-strasbourg.fr). The diagnosis should therefore focus on the global academic username/password pair, not on webmail in isolation.
For AESH who have never activated their account, the username and NUMEN must be obtained from the administrative manager. After the initial activation stage, only the manager can relay this information.
Phishing Targeting Academic Accounts: Checks Before Entering Credentials
Phishing attacks targeting academic messaging systems have intensified in recent years, to the point that the Ministry of National Education launched Operation Cactus in March 2025 to raise awareness among schools about cyber risks.
Before entering any credentials, checking the domain in the address bar remains the most effective reflex. Legitimate pages exclusively use the subdomains of ac-strasbourg.fr (courrier.ac-strasbourg.fr, partage.ac-strasbourg.fr, pedagogie.ac-strasbourg.fr). Any URL that does not end exactly with ac-strasbourg.fr before the first slash is suspicious.
Fraudulent emails often mimic notifications of exceeded quota or password reset. Two reliable clues to spot them:
- The sender’s address contains an external domain (gmail.com, outlook.com, or a similar domain like ac-strasb0urg.fr with a zero).
- The login link redirects to a form hosted outside the academic domain. Hovering over the link without clicking is enough to reveal the real URL.
- The message asks to “confirm” the NUMEN or a password by replying to the email, which the academy never does.
Combining these checks with the activation of OTP on the Partage portal significantly reduces the risk of compromise, even in the event of accidentally clicking on a fraudulent link.
The messaging @ac-strasbourg.fr is not just a communication tool: it conditions access to the entire academic digital ecosystem. Keeping recovery information up to date, prioritizing IMAP configuration on mobile, and systematically checking domains before authentication are the three points that prevent the vast majority of blockages.
