N3i need to enable enrolment for MFA onto your NHS Mail account before you can enrol. We'll notify you by email once this has been done.

After you receive this notification, you can begin the self-enrolment process.

Follow the steps below to enrol for MFA:

1. Navigate to https://portal.nhs.net/
2. Click "Login"

3. Enter your account details and click "Sign in"

4. Click "Profile"

5. Click "My Profile"

6. Click "Self-Service"

7. Click "Self-enroll for Azure MFA"

8. Click "Confirm"

Now that you have enrolled for MFA, you will need to configure the MS Authenticator app on your mobile device (if that is the option you/your organisation are using).

Setting up the MS Authenticator App on your mobile device

Work through the steps detailed below to complete the setup process:

Please note: You won’t be able to install or use Microsoft Authenticator on Apple Watch. Microsoft recommend that you delete Microsoft Authenticator from your Apple Watch, and sign in with Microsoft Authenticator on another device.

1. Navigate to https://portal.nhs.net and click the button to log in
2. Enter your credentials and click "Sign in"

3. Click "Click me to enrol for Multi-Factor Authentication"

4. Choose the relevant account for your NHS mail account (if more than one account is showing).

5. Click the 'Next' button if this screen appears.

6. Most users will already have Microsoft Authenticator installed on their work phones. If this is the case, click "Next". Otherwise, click on the link to 'Download now' and install Microsoft Authenticator on a mobile device (there is a separate guide detailing how to download and install the app here)

7. Once you have Microsoft Authenticator installed. The website then takes you through steps required to configure Microsoft Authenticator as the secondary authentication method for your account. Click "Next" to proceed.

8. At the first time you open MS Authenticator, you will be prompted to accept the app terms and conditions. Click "Agree".

9. A setup wizard starts in the app. Click "Skip" to proceed with configuring the app without using the wizard.

10. Now start configuring the MS Authenticator app by clicking "Add Account" or "+"

11. Click on "Work or School Account"

12. Choose the option to scan a QR code and scan the QR code displayed in the web browser on your computer. Once scanned, click "Next" in the web browser on your computer.

13. A message appears asking whether to grant Authenticator permission to access your device's camera. Click "OK".

14. Hold your phone so you can see the QR code on the screen of your computer in the camera.

15. The app will automatically configure if the QR code has been scanned correctly. You may be prompted to grant permissions for the Authenticator app to push notifications to your device. Click "Allow".

16. After you have scanned the QR Code and granted permissions for notifications, go back to your web browser on your computer and click "Next".

17. A number will appear in the NHS Mail window on the web browser on your computer. At the same time, the app on your phone will open a box which requires you to type in a 2 digit number. Enter the number in the box on the app and click "Yes".

18. If you have entered the correct number into Microsoft Authenticator on your phone, the image below appears in the web browser on your computer.

19. The setup process is now complete. Click "Done". You can now close this web browser tab completely.