Please find below a summary of the main content of the Hague 2.0 release which was deployed on the 4th October 2023.
BAU Functionality – Product Backlog Items
- 73072- Default MFA on for new users created on the platform
This PBI introduces the default enablement of Multi-Factor Authentication (MFA) on all newly created user accounts.
The initial registration workflow for newly created user accounts will now apply MFA to the account once the Acceptable Use Policy has been accepted. New platform users will be directed to the Microsoft registration page to register their second factor authentication method. After registration has been completed, the user will be prompted for MFA on all O365 applications including when signing into the NHSmail Portal.
- This feature does not apply to users managed by the National Administration Service.
- If deemed necessary, Local Administrators can disable MFA on new users on an account-by-account basis via the User Management page and MFA can be disabled either before or after an account has registered for it. If MFA needs to be disabled before the MFA registration stage – and a local risk-based assessment must be completed for each disablement – the new user must have accepted the AUP and set their account secret first. Local Administrators will need to work with their new users directly in these instances as the user will be prompted to register for MFA at their next login.
For additional guidance, please see the following support site articles:
- Create User Accounts – Create user account – NHSmail Support
- Welcome New Users to NHSmail – Welcome new users to NHSmail – NHSmail Support
- Logging into NHSmail as a New User for the First Time – Logging into NHSmail as a new user for the first time – NHSmail Support
- Getting Started with MFA – Getting started with mfa – NHSmail Support
- MFA Admin Guide – MFA admin guide – NHSmail Support