Skip to main content

Logging into the employer portal with multi-factor authentication (MFA)

Digital Staff Passport uses MFA to increases the security of the service and its users' data.

Note: multi-factor authentication was introduced with release 7 of Digital Staff Passport in June 2024.

There are 2 options for MFA:

  • using the Microsoft Authenticator app 
  • using a mobile phone and SMS security code 

On the login screen of your employee portal, enter your email address and password and select 'Login'.

DSP MFA step 1

 

You will now see the MFA options. To get a message to your phone, jump down to these instructions.

 

Using the Microsoft Authenticator app

Select 'Authenticator app' and then 'Continue'.

DSP MFA step 2

 

You'll see a QR code to scan, or a link to click to enter a code manually. 

DSP MFA step 3

 

Open up your Microsoft Authenticator app and select the + icon in top right-hand corner. Select 'Work or school account' and then 'Scan QR code'.

DSP MFA step 4 DSP MFA step 5 DSP MFA step 6

 

Your web browser will refresh to request you enter your code from the Microsoft Authenticator app.

DSP MFA step 7

 

Your Microsoft Authenticator app will now show a one-time code to enter. Note: the code changes every 30 seconds. 

DSP MFA step 8

 

Enter the code into the web browser and select 'Verify'. You will now be logged into the employer portal.

Important: if you accidently delete your code in your Microsoft Authenticator app, or you lose your phone, you will need to log a ticket with the Digital Staff Passport service desk to request to unlink your mobile from your account.

Email: [email protected] 
Subject line: Digital Staff Passport – Unlink mobile from Active Directory 

Email body:  Please can you unlink the following mobile from the Digital Staff Passport Active Directory:  
Organisation – [organisation name]
Your full name - [your name]
Email address you access the employer portal – [your email address]

You can use the service desk if you want to re-set your multi factor authentication method, for example if you selected Microsoft Authenticator and you now want to use phone. Remember, in this scenario you will need to remove your connection in the Microsoft Authenticator (go to your account, click on the settings icon and select ‘Remove account’).

Getting a message to your phone

At the MFA options screen, select 'Phone' and then 'Continue'.

DSP MFA step 9

 

You'll see a screen asking you to enter your mobile number and options to 'Send code' or 'Call me'. If you choose 'Call me', you'll receive a phone call and hear an automated voice read out the numbers of your code.

DSP MFA step 10

 

When you have received your code via the option you chose, enter it into the next screen and select 'Verify code'.

DSP MFA step 11

 

You will then be logged into your employer portal.

Note: if you choose phone option, you will always be given the option to switch to use the Authenticator app for MFA, every time you log in. If you do switch, you will no longer be given the option to use phone for MFA. 

Last edited: 26 June 2024 2:45 pm