By Rachel Monroe, hotel systems support lead with 10 years of experience handling property accounts, password resets, and application permissions
Last reviewed: July 27, 2026
IHG Merlin is an internal work portal for eligible IHG corporate employees, managed-hotel colleagues, franchise-hotel users, contractors, vendors, and other authorized personnel. The current authentication page provides a sign-on form and a Forgot password or username? route for account assistance.
This independent guide is not affiliated with IHG Hotels & Resorts. Registration, recovery, and permission changes should be completed through IHG systems or the authorized support contact for the user’s hotel or organization.
What IHG Merlin is used for
Merlin is a workplace gateway rather than a guest booking account. It connects authorized users with applications required for hotel operations, corporate work, training, reporting, recruitment, finance, and other internal functions.
Official IHG pages identify Merlin alongside services such as MyID, MyLearning, Outlook Webmail, PeopleSoft, SmartPay, reporting resources, and hotel performance applications. Access to an individual tool depends on the person’s employer, property, region, job responsibilities, and assigned permissions.
This creates two separate checks. Merlin first determines whether the account can sign in. The requested application may then decide whether the account is authorized to open it.
A successful portal login does not grant every internal tool.
Choose Merlin instead of the guest account
IHG One Rewards and IHG Merlin solve different problems.
| Account | Main purpose |
|---|---|
| IHG Merlin | Internal workplace applications and hotel resources |
| IHG One Rewards | Guest bookings, stays, points, and loyalty benefits |
| MyID | Network identity and account administration |
| Individual internal app | A specific operational, HR, learning, or finance task |
The IHG One Rewards page is designed for guest membership activity. Merlin requires an eligible work or business relationship with IHG.
Do this first: identify the task. Use Merlin for an internal hotel application and the guest account for bookings or points.
Skip a One Rewards password reset when the missing resource is MyLearning, PeopleSoft, reporting, procurement, or another workplace tool. Even when both accounts use the same email address, they are not automatically the same identity.
Start from the current sign-on page
The live IHG sign-on screen includes a password field and the Forgot password or username? control. It is connected to the Merlin authentication flow rather than the public hotel-booking site.
Use the current IHG-controlled route supplied through Merlin, MyID, or the hotel’s approved workplace materials. Avoid third-party pages that reproduce general instructions but cannot determine which domain, property, or employer owns the account.
Old bookmarks are another source of friction. A saved link may point to an application redirect created after authentication instead of the normal Merlin entry point.
Return to Merlin first. Skip repeated refreshes of a long session address.
A user who reaches a procurement, recruitment, learning, or brand-specific login has not necessarily reached the central Merlin sign-on page. IHG operates several separate business systems, and each may require Merlin authentication before applying its own permissions.
How a new Merlin account is created
Merlin registration is not open to the general public. IHG must associate the account with an eligible hotel, corporate organization, contractor relationship, or authorized sponsor.
IHG’s registration guidance separates users by category. Eligible hotel users may receive an invitation code at the email address provided during the request process. The invitation includes a link for self-registration, and users who already have a code can continue through the IHG login process.
Corporate employees and certain managed-hotel colleagues receive a Network ID and temporary password through onboarding. Contractors and vendors are directed to the IHG corporate contact responsible for arranging their Network ID through MyID.
No invitation? Contact the manager, hotel IT administrator, or corporate sponsor who initiated the request.
Do not submit several registrations under different addresses. A different email does not replace the required property association or sponsor approval, and it may make it less clear which request should be completed.
Account procedures can vary by region and management model.
Reset the password through the correct domain
IHG directs affected corporate and hotel users to its password service. The reset instructions require the user to choose the applicable domain and enter the assigned User ID before selecting the recovery option.
The domain field deserves attention.
A valid ID submitted under the wrong account category may not produce the expected recovery path. Before assuming that the identity is missing, confirm whether the account belongs to corporate, managed-hotel, franchise-hotel, or another supported environment.
Use Forgot Password when the current password is unknown. Use a change-password option only when the existing password can still be supplied.
The central sign-on page also offers a combined Forgot password or username? entry. Follow the account-specific instructions displayed after choosing it rather than relying on a generic Rewards reset page.
Wait before resetting the password again
IHG’s account-support guidance tells users to test a new password by signing in with the Merlin ID and completing second-factor authentication. Its password instructions also warn that the updated password can require time to propagate among connected platforms.
This is where many resets go wrong. A colleague changes the password, tests one downstream application immediately, receives another rejection, and creates a second password before the first update has finished moving through the environment.
Wait through the period stated by the reset page. Then test central Merlin access before testing the individual application.
If Merlin accepts the new password but one tool remains unavailable, stop resetting it. The remaining issue may involve application authorization, cached credentials on a device, or a property-level role.
One controlled test is better.
Account disabled or locked
A password problem is not the only reason an account may reject access.
IHG network-account support states that an account may need to be re-enabled through the help desk. It also says a general manager or Hotel IT Admin may be able to re-enable a hotel account through MyID.
That is a different action from changing the password. A newly created password cannot restore an account that remains disabled.
Use this order:
- Confirm the assigned identity and domain.
- Determine whether the account is disabled or merely rejecting the password.
- Ask the GM, Hotel IT Admin, or help desk to check the account status.
- Reset the password only when the documented process calls for it.
Do not keep attempting sign-in after the page reports a lock or disabled state. More attempts will not add the missing account status change.
Second-factor authentication failures
Merlin may require a second authentication step after accepting the ID and password. IHG’s support page instructs users to complete second-factor authentication when testing a new password.
Separate the stages carefully.
If the account is rejected before the second-factor screen, check the ID, domain, password, synchronization, and account status. If the password is accepted but the second step fails, focus on the registered authentication method.
Do not reset a working password merely because the second factor is unavailable.
A replaced device, missing authenticator, or locked authentication method may require help-desk intervention. Use the support path shown within the IHG network-account environment rather than attempting to register an unrelated Merlin account.
Merlin opens, but an application is missing
Merlin authentication and application access are separate. The official environment links users to multiple systems serving different business functions, so the available list is not identical for every colleague.
A missing application may depend on:
- The hotel or corporate organization attached to the account
- Franchise, managed-hotel, or corporate status
- Job role or department
- Regional availability
- MyID permissions
- A required property-level assignment
Check the scope of the failure. When Merlin opens and several internal tools work, prioritize the missing application’s role assignment.
Skip another password reset.
The GM, Hotel IT Admin, department administrator, or application owner may need to update the account. The exact contact varies by region and workplace structure.
Employee room benefits require a separate link
Merlin access alone does not complete employee-rate setup.
IHG’s Employee Room Benefit Programme says eligible employees must have their IHG One Rewards membership linked to the Merlin ID, or have the employee room benefit activated through Loyalty Connect by a manager.
This involves three distinct elements:
- An active workplace identity
- An IHG One Rewards membership
- The required link or benefit activation
A working Merlin password does not prove that the Rewards number is linked. A working Rewards account does not prove that the employee benefit has been activated.
Check the link first. Skip guest-account troubleshooting when the problem is eligibility or manager activation.
The programme’s details and availability may vary by property or region, so employees should rely on the current IHG employee-benefit page and their workplace contact.
Where to route an unresolved problem
Use the IHG network-account support route when:
- The correct User ID is unknown
- An invitation code never arrives
- The account is associated with the wrong hotel or sponsor
- The correct domain does not locate the account
- The account appears disabled
- No working second-factor method remains
- Merlin opens but a required internal tool is absent
IHG’s network-support material says hotel accounts may be re-enabled by a GM or Hotel IT Admin through MyID, while other cases can be routed through the help desk’s password-reset option.
A useful support report should state the user category, hotel or corporate relationship, affected application, exact error wording, and whether the problem occurs before or after second-factor authentication.
Leave all authentication secrets out of the request.
Frequently asked questions
Is IHG Merlin for hotel guests?
No. It is a workplace system.
Can I create a Merlin account myself?
Only through an authorized account process. Eligible hotel users may receive an invitation code, while corporate employees, managed-hotel users, contractors, and vendors follow onboarding or sponsor-based routes.
Why is my IHG One Rewards password rejected?
One Rewards and Merlin are separate account environments. Use the workplace identity assigned through IHG for Merlin rather than assuming the guest password applies.
What should I check before resetting my password?
Confirm the User ID, account domain, and whether the account is active. A wrong domain or disabled account can look like a password failure but requires a different correction.
Who can re-enable a disabled hotel account?
IHG says the help desk can assist and that the hotel’s GM or Hotel IT Admin may be able to re-enable the account through MyID.
Why does Merlin work but MyLearning does not?
The central login may be valid while MyLearning lacks the required role, property association, or application permission. Ask the appropriate administrator to check access before resetting a working password.
Does Merlin automatically activate employee rates?
No. IHG says the eligible employee’s One Rewards membership must be linked to the Merlin ID, or the benefit must be activated through Loyalty Connect by a manager.
What if second-factor authentication fails?
Use the IHG network-account support path. When the password has already been accepted, prioritize the authentication method rather than performing another password reset.
Begin with the correct Merlin identity and domain, determine whether the account is active, and separate password trouble from second-factor or application-permission failures before changing anything else.