Authenticate using Microsoft Authenticator

1. Go to the national clinical information system that you wish to access.

Some systems will automatically send you to the NHS CIS2 authentication page. Others may require you to select a login button.

(See the full list of organisations using NHS CIS2).

2. Select Authenticator App and then Continue.

3. Enter your email address and password

4. Open the Microsoft Authenticator app and find the verification code.

Enter this in the field provided.

Its best to wait until a new code appears to give yourself the most time available to enter it and check it.

Select Submit to continue.

You may be offered a screen to select the role you want to use.

This is dependant on the application you are using and the number of roles that you have assigned to you.

If you have:

• only 1 role, that role is selected for you and and won't see the Role Selection page
• 2 - 5 roles, they will be listed for you to select from. Select the role you want to use.
• more than 5 roles, they will be listed for you to select from as well as a search box to filter the list. 

Once you have found the appropriate role, select the role you want to use.

If you change the mobile device the authenticator is registered to, you'll need to transfer it to the new device.

If you have the old device and the new device is of the same type (Android or iOS), you can perform a backup from the old device and restore on the new device. In the MS Authenticator App on the old device, choose Settings under the cog icon in the top right of the app and then enable cloud/iCloud backup.

You can confirm the backup has succeeded by pressing the details and verifying the date and time of the last backup.

Once the backup has been made on the new device, after you have installed the MS Authenticator App, choose 'Restore from backup'.

Log in using your credentials. You will need to confirm the login on the old device. This will then add the authenticator to the new device.

Make sure you securely erase the old device once complete. You must not sign in on the new device before restoring the backup.

If you do not have access to the old device or it is a different type, then you will need to request a Registration Authority user removes the existing authenticator option before you can either add the new device yourself or ask a Registration Authority user to perform this step and complete the registration steps.

If you have forgotten your password you will need to talk to an RA who will deregister your Microsoft Authenticator device and register your Microsoft Authenticator device again.

If you enter the wrong verification code multiple times you will be locked out and you will need to talk to an RA who will deregister your Microsoft Authenticator device and register your Microsoft Authenticator device again.