diff --git a/.env b/.env
index dc3a6d0b..5a31bc17 100644
--- a/.env
+++ b/.env
@@ -1 +1 @@
-BASE_ROUTE = 'Base route'
\ No newline at end of file
+NEXT_PUBLIC_URL_SPID_LOGIN=http://localhost:9090/login
\ No newline at end of file
diff --git a/.env.development b/.env.development
new file mode 100644
index 00000000..dbb6e8e5
--- /dev/null
+++ b/.env.development
@@ -0,0 +1 @@
+NEXT_PUBLIC_URL_SPID_LOGIN=http://localhost:9090/login
diff --git a/.env.local b/.env.local
new file mode 100644
index 00000000..dbb6e8e5
--- /dev/null
+++ b/.env.local
@@ -0,0 +1 @@
+NEXT_PUBLIC_URL_SPID_LOGIN=http://localhost:9090/login
diff --git a/.env.production b/.env.production
new file mode 100644
index 00000000..dbb6e8e5
--- /dev/null
+++ b/.env.production
@@ -0,0 +1 @@
+NEXT_PUBLIC_URL_SPID_LOGIN=http://localhost:9090/login
diff --git a/src/app/[locale]/(pages)/access/page.tsx b/src/app/[locale]/(pages)/access/page.tsx
index 64c58948..9e2ba611 100644
--- a/src/app/[locale]/(pages)/access/page.tsx
+++ b/src/app/[locale]/(pages)/access/page.tsx
@@ -4,10 +4,17 @@ import { CieIcon } from '@pagopa/mui-italia/dist/icons/CieIcon';
 import { SpidIcon } from '@pagopa/mui-italia/dist/icons/SpidIcon';
 import { useTranslations } from 'next-intl';
 import Link from 'next/link';
+import { useState } from 'react';
 import { ROUTES } from '../../_utils/routes';
+import { SelectIdp } from '../../_component/selectIdp/selectIdp';
+import { SpidLevels } from '../../_component/selectIdp/idpList';
 
 const Access = (): React.ReactElement => {
+  const [openDialog, setOpenDialog] = useState<boolean>(false);
   const t = useTranslations('access');
+  const spidLevel: SpidLevels = {
+    type: 'L2',
+  };
 
   return (
     <Grid container justifyContent="center" bgcolor="background.default">
@@ -68,7 +75,7 @@ const Access = (): React.ReactElement => {
                       width: '100%',
                       height: '50px',
                     }}
-                    // onClick={() => setShowIDPS(true)}
+                    onClick={() => setOpenDialog(true)}
                     variant="contained"
                     startIcon={<SpidIcon />}
                   >
@@ -154,6 +161,13 @@ const Access = (): React.ReactElement => {
           </Link>
         </Grid>
       </Grid>
+      <SelectIdp
+        isOpen={openDialog}
+        spidLevel={spidLevel}
+        onClose={(opn) => {
+          setOpenDialog(opn);
+        }}
+      />
     </Grid>
   );
 };
diff --git a/src/app/[locale]/(pages)/logoutInit/page.tsx b/src/app/[locale]/(pages)/logoutInit/page.tsx
index 90fd17c0..69f82e51 100644
--- a/src/app/[locale]/(pages)/logoutInit/page.tsx
+++ b/src/app/[locale]/(pages)/logoutInit/page.tsx
@@ -9,10 +9,16 @@ import { Introduction } from '../../_component/introduction/introduction';
 import { commonBackgroundDark } from '../../_utils/styles';
 import { FAQ } from '../../_component/accordion/faqDefault';
 import { SelectIdp } from '../../_component/selectIdp/selectIdp';
+import { SpidLevels } from '../../_component/selectIdp/idpList';
 
 const Init = (): React.ReactElement => {
   const t = useTranslations('logout');
   const [openDialog, setOpenDialog] = useState<boolean>(false);
+
+  const spidLevel: SpidLevels = {
+    type: 'L1',
+  };
+
   return (
     <>
       <Grid sx={commonBackgroundDark} container>
@@ -64,12 +70,7 @@ const Init = (): React.ReactElement => {
         </Grid>
       </Grid>
       <FAQ />
-      <SelectIdp
-        open={openDialog}
-        onClose={(opn) => {
-          setOpenDialog(opn);
-        }}
-      />
+      <SelectIdp isOpen={openDialog} spidLevel={spidLevel} onClose={setOpenDialog} />
     </>
   );
 };
diff --git a/src/app/[locale]/(pages)/validateSession/page.tsx b/src/app/[locale]/(pages)/validateSession/page.tsx
index dbac57c0..d29d5e23 100644
--- a/src/app/[locale]/(pages)/validateSession/page.tsx
+++ b/src/app/[locale]/(pages)/validateSession/page.tsx
@@ -1,21 +1,20 @@
 'use client';
-import { redirect } from 'next/navigation';
 import { useEffect } from 'react';
-import { ROUTES } from '../../_utils/routes';
-import useToken from '../../_hooks/useToken';
+import { redirect } from 'next/navigation';
 import Loader from '../../_component/loader/loader';
+import { extractToken, parseJwt, userFromJwtToken } from '../../_utils/jwt';
+import { storageTokenOps, storageUserOps } from '../../_utils/storage';
+import { ROUTES } from '../../_utils/routes';
 
 const Check = (): React.ReactElement => {
-  const { tokenError } = useToken();
-
   useEffect(() => {
-    if (tokenError === 'ERROR') {
-      redirect(ROUTES.LOGOUT_AUTH_KO);
-    }
-    if (tokenError === 'OK') {
+    if (parseJwt(extractToken())) {
+      // FIXME: Jira ticket number 521
+      storageTokenOps.write(extractToken());
+      storageUserOps.write(userFromJwtToken(extractToken()));
       redirect(ROUTES.SESSION);
     }
-  }, [tokenError]);
+  }, []);
 
   return (
     <>
diff --git a/src/app/[locale]/_component/header/header.tsx b/src/app/[locale]/_component/header/header.tsx
index 9d56b53e..ffdf4cd8 100644
--- a/src/app/[locale]/_component/header/header.tsx
+++ b/src/app/[locale]/_component/header/header.tsx
@@ -1,7 +1,6 @@
 'use client';
 import { HeaderAccount, HeaderProduct, LogoIOApp } from '@pagopa/mui-italia';
 import React from 'react';
-import { IconButton } from '@mui/material';
 import useLogin from '../../_hooks/useLogin';
 
 const Header = (): React.ReactElement => {
@@ -37,17 +36,6 @@ const Header = (): React.ReactElement => {
         }}
         enableLogin={isLoggedIn}
         enableAssistanceButton={true}
-        userActions={[
-          {
-            id: 'logout',
-            label: 'Esci',
-            onClick: () => {
-              // eslint-disable-next-line no-console
-              console.log('User logged out');
-            },
-            icon: <IconButton />,
-          },
-        ]}
       />
       <HeaderProduct
         productsList={[
diff --git a/src/app/[locale]/_component/selectIdp/idpList.tsx b/src/app/[locale]/_component/selectIdp/idpList.tsx
index 2459cb6c..cad72ef1 100644
--- a/src/app/[locale]/_component/selectIdp/idpList.tsx
+++ b/src/app/[locale]/_component/selectIdp/idpList.tsx
@@ -2,9 +2,29 @@ import React from 'react';
 import { Grid, Button, Icon } from '@mui/material';
 import { IDPS, IdentityProvider } from '../../_utils/idps';
 
-export function IdpList() {
+interface IIdpList {
+  spidLevel: SpidLevels;
+}
+
+interface ISpidLevelL1 {
+  type: 'L1';
+}
+
+interface ISpidLevelL2 {
+  type: 'L2';
+}
+
+interface ISpidLevelL3 {
+  type: 'L3';
+}
+
+export type SpidLevels = ISpidLevelL1 | ISpidLevelL2 | ISpidLevelL3;
+
+export function IdpList({ spidLevel }: IIdpList) {
   const getSPID = (IDP: IdentityProvider) => {
-    window.location.assign(`http://localhost:9090/login?entityID=${IDP.entityId}&authLevel=SpidL1`);
+    window.location.assign(
+      `${process.env.NEXT_PUBLIC_URL_SPID_LOGIN}?entityID=${IDP.entityId}&authLevel=Spid${spidLevel.type}`
+    );
   };
 
   return (
diff --git a/src/app/[locale]/_component/selectIdp/selectIdp.tsx b/src/app/[locale]/_component/selectIdp/selectIdp.tsx
index 6efe2074..0afe5058 100644
--- a/src/app/[locale]/_component/selectIdp/selectIdp.tsx
+++ b/src/app/[locale]/_component/selectIdp/selectIdp.tsx
@@ -1,18 +1,23 @@
 import { Box, Button, Dialog, Typography } from '@mui/material';
 import React, { useEffect, useState } from 'react';
-import { IdpList } from './idpList';
+import { IdpList, SpidLevels } from './idpList';
 
 interface IDialog {
-  open: boolean;
+  isOpen: boolean;
+  spidLevel: SpidLevels;
   onClose: (open: boolean, event: React.MouseEvent<HTMLButtonElement>) => void;
 }
 
-export function SelectIdp({ open, onClose }: IDialog) {
+export function SelectIdp({ isOpen, spidLevel, onClose }: IDialog) {
   const [openDialog, setOpenDialog] = useState<boolean>(false);
 
   useEffect(() => {
-    setOpenDialog(open);
-  }, [open]);
+    setOpenDialog(isOpen);
+  }, [isOpen]);
+
+  const level: SpidLevels = {
+    type: spidLevel.type,
+  };
 
   return (
     <>
@@ -29,7 +34,7 @@ export function SelectIdp({ open, onClose }: IDialog) {
         >
           {'Scegli il tuo Identity Provider'}
         </Typography>
-        <IdpList />
+        <IdpList spidLevel={level} />
         <Box p={4}>
           <Button onClick={(e) => onClose(false, e)} fullWidth variant="outlined">
             Annulla
diff --git a/src/app/[locale]/_component/sessionProvider.tsx b/src/app/[locale]/_component/sessionProvider.tsx
new file mode 100644
index 00000000..4d1967e8
--- /dev/null
+++ b/src/app/[locale]/_component/sessionProvider.tsx
@@ -0,0 +1,59 @@
+'use client';
+
+import { useRouter, usePathname } from 'next/navigation';
+import { useEffect, useState } from 'react';
+import { LOGIN_ROUTES, PUBBLIC_ROUTES, ROUTES } from '../_utils/routes';
+import useToken from '../_hooks/useToken';
+import Loader from './loader/loader';
+import Header from './header/header';
+import Footer from './footer/footer';
+
+interface LoginStatusIdle {
+  status: 'IDLE';
+}
+interface LoginStatusAuthorized {
+  status: 'AUTHORIZED';
+}
+interface LoginStatusNotAuthorized {
+  status: 'NOT_AUTHORIZED';
+}
+
+export type LoginStatus = LoginStatusIdle | LoginStatusAuthorized | LoginStatusNotAuthorized;
+
+const SessionProviderComponent = ({ children }: { readonly children: React.ReactNode }) => {
+  const [loginStatus, setLoginStatus] = useState<LoginStatus>({ status: 'IDLE' });
+  const { isTokenValid, removeToken } = useToken();
+  const router = useRouter();
+  const pathName = usePathname();
+  const cleanPath = (path: string): string => path.replace(/^(\/(en|it))\/(.*)$/, '');
+
+  useEffect(() => {
+    if (LOGIN_ROUTES.includes(cleanPath(pathName))) {
+      removeToken();
+    }
+    if (PUBBLIC_ROUTES.includes(cleanPath(pathName))) {
+      setLoginStatus({ status: 'AUTHORIZED' });
+    }
+    if (!PUBBLIC_ROUTES.includes(cleanPath(pathName)) && isTokenValid()) {
+      setLoginStatus({ status: 'AUTHORIZED' });
+    }
+    if (!PUBBLIC_ROUTES.includes(cleanPath(pathName)) && !isTokenValid()) {
+      setLoginStatus({ status: 'NOT_AUTHORIZED' });
+      router.push(ROUTES.LOGIN);
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [pathName]);
+
+  if (loginStatus.status === 'IDLE' || loginStatus.status === 'NOT_AUTHORIZED') {
+    return (
+      <>
+        <Header />
+        <Loader />
+        <Footer />
+      </>
+    );
+  }
+  return <>{children}</>;
+};
+
+export default SessionProviderComponent;
diff --git a/src/app/[locale]/_hooks/useLogin.tsx b/src/app/[locale]/_hooks/useLogin.tsx
index ab9c708a..bece9091 100644
--- a/src/app/[locale]/_hooks/useLogin.tsx
+++ b/src/app/[locale]/_hooks/useLogin.tsx
@@ -1,7 +1,8 @@
 'use client';
 import { useEffect, useState } from 'react';
 import { User } from '../_model/User';
-import { cookieTokenOps, cookieUserOps } from '../_utils/cookie';
+import { storageTokenOps, storageUserOps } from '../_utils/storage';
+import { isBrowser } from '../_utils/common';
 
 interface LoginData {
   isLoggedIn: boolean;
@@ -12,12 +13,12 @@ interface LoginData {
 const useLogin = (): LoginData => {
   const [isLoggedIn, setIsLoggedIn] = useState<boolean>(false);
   const [userLogged, setUserLogged] = useState<User | undefined>(undefined);
-  const cookieTokenRead = cookieTokenOps.read();
+  const cookieTokenRead = isBrowser() ? storageTokenOps.read() : null;
 
   useEffect(() => {
     if (cookieTokenRead) {
       setIsLoggedIn(true);
-      setUserLogged(cookieUserOps.read());
+      setUserLogged(storageUserOps.read());
     } else {
       setIsLoggedIn(false);
       setUserLogged(undefined);
@@ -27,8 +28,7 @@ const useLogin = (): LoginData => {
   const logOut = () => {
     setIsLoggedIn(false);
     setUserLogged(undefined);
-    cookieTokenOps.delete();
-    cookieUserOps.delete();
+    sessionStorage.clear();
   };
 
   return {
diff --git a/src/app/[locale]/_hooks/useToken.tsx b/src/app/[locale]/_hooks/useToken.tsx
index b40fc494..f5e20219 100644
--- a/src/app/[locale]/_hooks/useToken.tsx
+++ b/src/app/[locale]/_hooks/useToken.tsx
@@ -1,31 +1,39 @@
 'use client';
 import { useEffect, useState } from 'react';
-import { extractToken, parseJwt, userFromJwtToken } from '../_utils/jwt';
-import { cookieTokenOps, cookieUserOps } from '../_utils/cookie';
+import { storageTokenOps, storageUserOps } from '../_utils/storage';
+import { isBrowser } from '../_utils/common';
 
-interface Token {
+interface IToken {
   token: string;
-  tokenError: 'PENDING' | 'OK' | 'ERROR';
+  isTokenValid: () => boolean | undefined;
+  removeToken: () => void;
 }
 
-const useToken = (): Token => {
+const useToken = (): IToken => {
   const [token, setToken] = useState<string>('');
-  const [tokenError, setTokenError] = useState<'PENDING' | 'OK' | 'ERROR'>('PENDING');
+  const windowAvailable = isBrowser();
 
   useEffect(() => {
-    if (parseJwt(extractToken())) {
-      setToken(extractToken());
-      setTokenError('OK');
-      cookieTokenOps.write(extractToken());
-      cookieUserOps.write(userFromJwtToken(extractToken()));
-    } else {
-      setTokenError('ERROR');
+    if (windowAvailable) {
+      setToken(storageTokenOps.read());
     }
   }, []);
 
+  const isTokenValid = () => {
+    if (windowAvailable) {
+      return !!storageTokenOps.read();
+    }
+  };
+
+  const removeToken = () => {
+    storageTokenOps.delete();
+    storageUserOps.delete();
+  };
+
   return {
     token,
-    tokenError,
+    isTokenValid,
+    removeToken,
   };
 };
 
diff --git a/src/app/[locale]/_utils/common.ts b/src/app/[locale]/_utils/common.ts
new file mode 100644
index 00000000..5408914e
--- /dev/null
+++ b/src/app/[locale]/_utils/common.ts
@@ -0,0 +1 @@
+export const isBrowser = () => typeof window !== 'undefined';
diff --git a/src/app/[locale]/_utils/routes.ts b/src/app/[locale]/_utils/routes.ts
index 8c4a9344..09d485ac 100644
--- a/src/app/[locale]/_utils/routes.ts
+++ b/src/app/[locale]/_utils/routes.ts
@@ -3,10 +3,17 @@ export const ROUTES = {
   LOGOUT_INIT: `/logoutInit`,
   SESSION: `/session`,
   PROFILE: `/profile`,
+  PROFILE_BLOCK: `/profileBlock`,
+  PROFILE_RESTORE: `/profileRestore`,
+  RESTORE_CODE: `/restoreCode`,
+  RESTORE_THANK_YOU: `/restoreThankYou`,
+  PROFILE_BLOCK_SUCCESS: `/profileBlockSuccess`,
+  PROFILE_ACCESS_BLOCK: `/profileAccessBlock`,
   VALIDATE_SESSION: '/validateSession',
   THANK_YOU: '/thankyou',
   LOGOUT_AUTH_KO: '/logoutKoAuth',
   LOGOUT_KO: '/logoutKo',
+  KO: '/ko',
   LOGOUT_NO_SESSION_L1: '/logoutNoSession/l1',
   LOGOUT_NO_SESSION_L2: '/logoutNoSession/l2',
 };
diff --git a/src/app/[locale]/_utils/storage.ts b/src/app/[locale]/_utils/storage.ts
index 42e44bfa..7aca83bb 100644
--- a/src/app/[locale]/_utils/storage.ts
+++ b/src/app/[locale]/_utils/storage.ts
@@ -2,6 +2,6 @@ import { User } from '../_model/User';
 import { storageOpsBuilder } from './storage-utils';
 
 /** An object containing a complete set of operation on the storage regarding the key used to store in the storage the loggedUser token in selfcare projects */
-export const storageTokenOps = storageOpsBuilder<string>('token', 'string', true);
+export const storageTokenOps = storageOpsBuilder<string>('token', 'string', false);
 /** An object containing a complete set of operation on the storage regarding the key used to store in the storage the loggedUser in selfcare projects */
-export const storageUserOps = storageOpsBuilder<User>('user', 'object', true);
+export const storageUserOps = storageOpsBuilder<User>('user', 'object', false);
diff --git a/src/app/[locale]/layout.tsx b/src/app/[locale]/layout.tsx
index 58377dc2..8e485211 100644
--- a/src/app/[locale]/layout.tsx
+++ b/src/app/[locale]/layout.tsx
@@ -1,8 +1,9 @@
 import { NextIntlClientProvider } from 'next-intl';
 import { notFound } from 'next/navigation';
-import ThemeProviderComponent from './_component/themeProvider/themeProvider';
-import Header from './_component/header/header';
 import Footer from './_component/footer/footer';
+import Header from './_component/header/header';
+import SessionProviderComponent from './_component/sessionProvider';
+import ThemeProviderComponent from './_component/themeProvider/themeProvider';
 import { Providers } from './_redux/provider';
 
 export async function generateStaticParams() {
@@ -25,15 +26,18 @@ const RootLayoutWithLocaleAndTheme = async ({
   } catch (error) {
     notFound();
   }
+
   return (
     <html lang={locale}>
       <body style={{ margin: '0' }}>
         <Providers>
           <NextIntlClientProvider locale={locale} messages={messages}>
             <ThemeProviderComponent>
-              <Header />
-              {children}
-              <Footer />
+              <SessionProviderComponent>
+                <Header />
+                {children}
+                <Footer />
+              </SessionProviderComponent>
             </ThemeProviderComponent>
           </NextIntlClientProvider>
         </Providers>
diff --git a/src/middleware.ts b/src/middleware.ts
index c391c851..c257500e 100644
--- a/src/middleware.ts
+++ b/src/middleware.ts
@@ -1,11 +1,8 @@
 import createIntlMiddleware from 'next-intl/middleware';
-import { NextRequest, NextResponse } from 'next/server';
-import { LOGIN_ROUTES, PUBBLIC_ROUTES, ROUTES } from './app/[locale]/_utils/routes';
+import { NextRequest } from 'next/server';
 
 export default async function middleware(request: NextRequest) {
-  const isLogged = request.cookies.get('token') ? true : false;
   const defaultLocale = request.headers.get('x-default-locale') || 'en';
-  const cleanPath = (path: string): string => path.replace(/^(\/(en|it))\/(.*)$/, '');
 
   const handleI18nRouting = createIntlMiddleware({
     defaultLocale: 'it',
@@ -16,15 +13,6 @@ export default async function middleware(request: NextRequest) {
 
   response.headers.set('x-default-locale', defaultLocale);
 
-  if (LOGIN_ROUTES.includes(cleanPath(request.nextUrl.pathname)) && isLogged) {
-    response.cookies.delete('token');
-    response.cookies.delete('user');
-  }
-
-  if (!PUBBLIC_ROUTES.includes(cleanPath(request.nextUrl.pathname)) && !isLogged) {
-    return NextResponse.redirect(new URL(ROUTES.LOGIN, request.url));
-  }
-
   return response;
 }