Archive for date: July 4th, 2023

We plan to migrate all internal NHS England (previously NHS Digital) services to NHS CIS2 Authentication.

In line with this, IF-DLP Registration and IF-DLP Authentication will be deprecated on 31 January 2024.

Both services will then be retired on 31 March 2024.

On 31 January 2024: 

• We will reduce the support level for the IF-DLP Authentication service from Bronze SLA to 'reasonable endeavours'.
• Operational hours will remain 8am to 6pm, Monday to Friday with no guarantees around service uptime.

On 31 March 2024: 

• Identity Management using IF-DLP Registration process will no longer be available.
• Authentication will no longer be available via IF-DLP Authentication.

Benefits of moving to the full NHS CIS2 Authentication service include:

• a higher level of security from the current DLP auth service
• a common identity with other NHS and Health and Social Care applications
• new features such as modern alternatives to smartcards, and supports access over the internet via devices other than Windows PCs
• more secure and better optimised for high availability and for the addition of new capabilities wherever demand creates a need

Definitions

Deprecation notice

A decision has been taken to deprecate a service. The deprecation notice is issued with a deprecation and retirement date. 

The service remains available for use. However, no new integrations are allowed.

Deprecation date

The service level changes from "Bronze" to "reasonable endeavours". The service remains available for use. No new integrations are allowed.

Retirement date

The retirement date is the date at the end of this period at which the service will be taken out of service. 

The service is no longer available for use after this point.

Note: This change affects the IF-DLP registration and authentication using https://dsp-portal.digital.nhs.uk/ - not the HSCN based Smartcard authentication to DLP (https://dsp-portal.national.ncrs.nhs.uk/). However, the HSCN based access will also be changing due to CIS1 Auth deprecation.

If you use the IF-DLP Registration process

If you are a registered IF-DLP user: 

• before 31 March 2024 you will need to re-register for a Care Identity profile

If you register other IF-DLP users: 

• before 31 March 2024 you will need plan if/how you support users to re-register for a Care Identity

If you use IF-DLP Authentication 

If you are a registered IF-DLP user, before 31 March 2024 you will need to: 

• re-register for a Care Identity profile
• check that you are able to use one of the authenticators provided by NHS CIS2 Authentication

If you are responsible for managing the DSCRO / DLP service

You should plan to:

• move the existing smartcard enabled authentication for DLP (https://dsp-portal.national.ncrs.nhs.uk/) to NHS CIS2 Authentication
• identify all users who are currently registered with IF-DLP Registration and support them in re-registering for a Care Identity profile
• support users in getting set up with authenticators provided by NHS CIS2 Authentication
• determine the best way to apply and manage the correct level of authorisation, for example RBAC roles assigned by Registration Authorities

How to re-register for a Care Identity profile

Users can re-register by using either:

• a Registration Authority
• the Apply for Care Identity service

NHS CIS2 Authentication provides a modern, secure authentication platform with securely proven identities and a wide range of authenticators, coupled with the National RBAC data.

It means:

• users can be enrolled either using a Registration Authority or via new Apply for Care Identity service.
• Registration Authorities can apply organisation based national RBAC roles and assist users with registering authenticators.
• users can securely access services over the internet using authentication options which suit their working environment.

Read more about CIS2 Authentication.

For questions, contact us by email on: nhscareidentityauthentication@nhs.net.