Skip to main content

7. Signing in as staff

Who can do it: any staff member with an active account.

Before you start

  • You need your work email and your password.
  • If your role requires two-step security, have your authenticator app ready (section 8).
  • Use a device you trust.

Steps

  1. Go to the staff sign-in page (/admin/sign-in). Its title is Staff and administrator sign in.
  2. Type your work email and password.
  3. Submit the sign-in form.
  4. If two-step security is switched on for you, the page Multi-factor verification appears.
    1. Type the Six-digit authenticator code from your app.
    2. Click Verify and continue.
    3. If you have lost your phone, click Use a recovery code, type one Single-use recovery code, and click Verify and continue.
  5. If your role must set up two-step security and has not yet done so, DFFMS opens Account security. Follow section 8.
  6. When you reach the dashboard, check the footer card Secure session. It should say MFA enrolled · Secure session active.

What happens next

  • You land on the Executive dashboard.
  • Your sidebar shows only the pages your role allows.

Common problems

  • "Staff accounts are created only through a programme invitation." You are on the staff page without an account. Use the invitation email. Do not use the public sign-up page.
  • You are sent back to the public account page with "staff access required". Your account is not a staff account. Ask an administrator to check it.
  • The code is refused five times. The account locks for 15 minutes. Wait, then try again with the correct code. If you cannot wait, ask an administrator.
  • The code is always wrong. Your phone clock may be wrong. Turn on automatic time in your phone settings, then try a new code.
  • You used a recovery code and cannot sign in again. Each recovery code works only once. Use another one, and then make new codes (section 8).