The penitentiary portal penitentiaire.justice.fr requires FranceConnect as the only authentication method to book a visiting room. When the connection fails, the issue rarely lies with the credentials: the problem most often comes from the technical chain between the browser, the identity provider, and the Ministry of Justice portal.
IP Filtering and Network Blocking on the Penitentiary Portal
State services now filter connections passing through a VPN or the iCloud Private Relay. NordVPN, ExpressVPN, ProtonVPN, and similar solutions trigger a silent rejection: the FranceConnect page spins indefinitely or returns a generic error without an exploitable code.
See also : How to Change a Ryanair Booking: Simple Steps to Modify Your Reservation
Apple’s Private Relay, enabled by default on recent devices under iCloud+, produces the same effect. The masked IP address is interpreted as suspicious by the authentication infrastructure, which cuts off the redirection to the identity provider even before entering the password.
We recommend switching to 4G or 5G from a phone to obtain an unfiltered operator IP. On a desktop computer connected via Wi-Fi behind a corporate VPN, mobile hotspot remains the fastest method to bypass this block. A guide detailing each diagnostic step in case of a connection issue to FranceConnect Visiting Room on Carnet de Bébé follows this network verification logic first.
You may also like : How to Quickly Resolve Connection Issues and Bugs on Cyclades
FranceConnect Certificate Error Related to System Clock
A discrepancy of a few minutes between the device’s clock and real time is enough to invalidate the SSL certificate exchanged during the FranceConnect redirection. The browser then interprets the certificate as expired or not yet valid, and the connection is interrupted with an error of type NET::ERR_CERT_DATE_INVALID or an opaque message on the penitentiary portal side.
On Android, automatic time synchronization sometimes disables after a system update. On Windows, the time service (W32Time) can desynchronize if the machine has been turned off for several days.
- On Android phone: Settings > System > Date and time > enable “Automatic date and time” and “Automatic time zone”.
- On iPhone: Settings > General > Date & Time > enable “Set Automatically”.
- On Windows: right-click on the clock > Adjust date/time > enable “Set time automatically”, then click “Sync now”.
- On macOS: System Preferences > Date & Time > check “Set date and time automatically”.
After correction, completely close the browser (not just the tab) before reconnecting to the portal.
Digital Identity Provider: Choosing the Right Account for the Visiting Room
FranceConnect offers several identity providers: Ameli, impots.gouv.fr, La Poste (Digital Identity), MSA, or France Identité. Not all respond the same way to the penitentiary portal. An account with incomplete civil status blocks the redirection to penitentiaire.justice.fr without an explicit error message.
The Ministry of Justice portal requires strict matching between the last name, first name, and date of birth transmitted by the identity provider. A missing accent, an absent hyphen in a compound name, or a commonly used first name different from the birth name causes a rejection.
France Identité as an Alternative Connection Method
The France Identité app allows authentication via a QR code scanned from the phone, bypassing the classic redirections between browser tabs. This method reduces session errors and third-party cookie issues, particularly common on Safari and Firefox in private browsing.
To use it, a national identity card in the bank card format (new format) is required. The app reads the NFC chip of the card and transmits the identity directly to FranceConnect. We observe that this method eliminates most blocks related to browser cache or security extensions.
Browser Cache and Third-Party Cookies Blocking the FranceConnect Session
The FranceConnect connection relies on a series of redirections between three distinct domains: the identity provider’s site, app.franceconnect.gouv.fr, and penitentiaire.justice.fr. The blocking of third-party cookies interrupts this chain of redirections without visible warning.
Chrome has blocked third-party cookies by default for several versions. Firefox in standard browsing applies enhanced tracking protection that intercepts some FranceConnect session cookies. Safari’s private browsing mode is even more restrictive.
- Clear the browser cache and cookies, then relaunch a clean session on penitentiaire.justice.fr.
- Temporarily disable extensions like uBlock Origin, Privacy Badger, or Ghostery, which may block FranceConnect redirection scripts.
- Use Chrome or Edge in standard mode (not in private browsing) with third-party cookies allowed for .gouv.fr domains.
If the problem persists after these manipulations, the “Consult Help” button displayed on the FranceConnect error page redirects to a contact form for support. This help pathway automatically identifies the technical error code, which speeds up processing by the support team.
Termination of the YRIS Account and Impact on Access to the Visiting Room
The YRIS account is no longer available as a FranceConnect identity provider. Individuals who used this account to access the penitentiary portal must create a new identification method with another provider (Ameli, impots.gouv.fr, La Poste, or France Identité).
No visiting room reservation data is lost during the provider change: the penitentiary portal links the account to the civil status, not to the FranceConnect provider used. The first connection with the new provider retrieves the history of visit permit requests and existing reservations, provided that the last name and date of birth exactly match the information already recorded.
Changing the identity provider remains the first avenue to explore for anyone facing repeated connection failures to the penitentiary portal. Checking the network status, the device clock, and the browser settings before contacting support allows resolving the vast majority of cases without waiting for a response.