| Feature | Employee ( Portal del Empleado ) | Client ( Acceso Clientes ) | |---------|--------------------------------|----------------------------| | | SSO + MFA mandatory | Standalone + optional MFA | | Session timeout | 15 minutes | 30 minutes | | Internal HR data | Yes | No | | Booking creation | Yes (staff travel) | Yes (client bookings) | | Access to internal memos | Yes | No | | API access | No | Yes (for B2B partners) | | Self-service password reset | Yes (via AD) | No (manual request) |