Accessing the Platform
Your data is valuable and private. We get that! MinistryPlatform is a secure web application. It runs on a browser, so it's available anytime, anywhere you have internet access. You're required to log in so we know who you are and what data you have permission to access.
All you need to access MinistryPlatform is a web browser, your organization's URL (formatted like this: https://{your platform domain}/mp
), and your credentials. An administrator must grant you permissions via a security role to do anything beyond logging in.
The Platform is supported on the following browsers:
- Latest version of Google Chrome
- Latest version of Mozilla Firefox (regular, not ESR)
- Latest version of Microsoft Edge
- Latest version of Macintosh Safari
Microsoft Internet Explorer is not a supported browser.
Create an Account
To access MinistryPlatform and its applications as a staff member or volunteer, you must have an account. Depending on how your organization decides to handle new accounts, you may or may not need to create an account yourself.
Each organization has its own site where you an access the Platform. Ask your administrator if you don't know where to find it. When you get there, you'll see the Log In window. The options that display depend on your organization's setup.
Basic Login Options | Additional Login Options |
---|---|
While you can set up an account, your system administrator needs to give you permission before you can see or do anything in MinistryPlatform. Contact your system administrator to provide you with the appropriate permission.
Sign Up Using a Social Login
- A SPoC must enable the social login option.
If this feature is enabled, you can sign up and log in using credentials from one of your social media accounts instead of your MinistryPlatform username and password. Admins, see External Login Authentication to set up external identity providers.
- Click the third-party provider to link to your user account. The options you can select from are determined by the identity providers your organization configured.
- Follow the prompts of the third-party provider to grant permission and share authentication details.
Once linked, a confirmation displays.
You can manage your social logins (also known as external identities) from the Platform. Click your account image in the top right, select User Account, and then click Social Logins. See User Account Dialog Box for step-by-step details.
Log In to the Platform
SPoCs can enable features to make logging in easy. With Simple Sign-On, you can use your email address or mobile phone number instead of a username. With Authentication Via Code, you can securely log in without a password. Otherwise, you can log in with a username and password.
If your credentials are valid, MinistryPlatform opens. If your credentials are invalid or you don't have the appropriate security role, a message displays to let you know. If you have trouble logging in, you can reset your password or contact your administrator.
Permissions
When you log in for the first time, you may not have permission to do anything in the system. Your administrator will assign a security role to your user account so you can access areas of the Platform. An administrator can also determine what each user sees in the online directory based on Participant Type or Member Type.
Admins, make sure you understand who can see what based on these settings and apply the correct permissions to each user.
We recommend that churches thoroughly understand their responsibilities in protecting the privacy of their church data. To do that, make sure you are aware of how people can misuse others' information. Visit our Trust Center for more details.
Tips to Prevent Scams and Phishing
If your website is public and has a way to sign up for a MinistryPlatform user account, you need to be aware of a sad but true reality: the church is a popular playground for scammers. If a scammer gains even limited access to the Platform, they may gather enough information from a trusted platform to launch some very successful social engineering scams. A scammer works to be more believable, more legitimate, and poses as someone who wants to "help" their church. Allowing an impostor to access your church directory could disrupt your church community.
Is it a scam or a legitimate request?
If your church receives a request for a MinistryPlatform account by email or through the account request process, how do you know if the person is real? It's not always easy to determine.
Ways to verify a request:
- Delete the email and see if he sends another email.
- This won't necessarily resolve anything.
- If Bill is actually phishing, he may continue to email you. The same would be true for an actual person.
- Reply and tell him that he doesn't need an account to give online. Direct him to request an account on your church website.
- If he does this, your church must still determine how to verify if this is a legitimate request or a scam.
- Reply and say you're sorry you haven't met him yet.
- Ask him something about your church that he can only know by visiting - something that isn't posted online.
- Or you could ask him to meet you at the next service. It would be unlikely that a "phish" would try to meet you in person.
Other considerations:
To keep MinistryPlatform as secure as possible, we do not allow unauthenticated people to add or update email addresses or phone numbers. For example, let's say you created a Household and Contact record for someone with just their phone number and no email address. Later, that person decides to create a user account, and they include their email address on the Sign Up form. The new User record will be linked to the matching Contact record, but the email address will not be added to it.
This is because the person who signed up for a user account may not be the actual person. If a scammer has access to a person's contact information (which is incredibly common with data breaches these days), they could attempt to sign up as that person and gain access to other things, such as donor information. So, the Platform only allows email and phone information to be added by an authenticated user or someone with admin permissions.
Reset Your Password
- You can't use this option if you use a shared email address.
- To reset your password by text message, you must be able to receive texts from MinistryPlatform.
If you already have an account but forgot your password, you can reset your password. Don't worry, it happens to the best of us!
Change Your Password
Maybe you remember your password but need to update it. You can do so within MinistryPlatform at any time.
- Click your user image in the top-right corner.
- Select User Account.
- Click Change/Edit Password.
- Enter your old password to confirm your account.
- Enter your new password.
- Confirm your new password.
- Click Save.
You can now use your new password when you log in to the Platform.
Add a Mobile Bookmark
If you plan to use the Platform on your mobile device, you can add a bookmark on your home screen so you can access it like any other application.
- On your preferred mobile browser, navigate to your Platform instance.
- Log in to MinistryPlatform.
- Click the menu icon (the ellipsis in upper-right corner).
- Click Add to Home Screen, and enter the name for the shortcut.
- Click Add.
Login Configuration for SPoCs
As a SPoC, you are uniquely positioned to ensure your users have a great experience using MinistryPlatform. And to use the Platform, people have to be able to log in. We recommend you make logging in as simple as possible—your users will thank you!
- User access depends on the security roles connected to their User record. It is your responsibility to manage these items appropriately for your users.
- When you enable Simple Sign-on through the Domain record, users can log in with their email, phone, or username. This is a helpful option for your users, and we strongly recommend you enable it.
- You can allow people to log in using external authentication, such as Facebook or Google credentials. Right now, this external authentication is only for the Platform. All other applications (such as BMT and Check-In) only support the username and password set in MinistryPlatform. To increase security, this external authentication feature replaced the Auto-Login URL feature.
- Your server's Domain record controls the password requirements for MinistryPlatform. Check out the Users section to learn more about password requirement options and how to change the requirement for your context.
- You can customize the email/text messages that are sent when users create an account, reset their password, and use multi-factor authentication. See the options under the User Account Configuration section on your Domain record.
- On the server, you can customize the length of inactivity allowed before reauthentication is required. Contact Support for information on how to update this setting.