Websites and apps you can access with CIS2 Authentication

The list below shows national services that have migrated to CIS2 Authentication:

• API Management Platform - hosts health and care APIs and integrations, primarily for the NHS in England.
• Apply for Care ID (AfCID) - a secure online ID verification service, for NHS users to submit and verify their documents online. 
• Bowel Cancer Screening Service (BCSS) - NHS Digital runs separate bowel cancer screening systems in England and the Isle of Man. The systems identify eligible people to be screened and invite them to participate in bowel screening.
• Breast Screening Service - breast screening services in the UK are supported by NHS Digital who provide the software to manage the call and recall of women who are eligible for breast screening.
• Care Identity Management (CIM) - part of the Care Identity Service, this new system allows Registration Authority users to manage access to patient data.
• Cervical Screening Management System (CSMS) - call/recall system inviting women to book a cervical screening appointment every three or five years, depending on their age. AAL2 enabled.
• Cohorting as a Service (CaaS) - securely identifies groups of people with shared characteristics from national health data.
• Data Landing Portal (DLP) - allows data to be transferred securely between organisations through a centrally managed system. AAL2 enabled.
• Demographic Spine Application
• Digital SR1 Service - assists terminally ill patients with a life expectancy of less than 12 months in accessing expedited processing for various essential benefits.
• Directory of Services (DoS) - the urgent and emergency care Directory of Services (DoS) is a database of NHS services in England. It works with NHS Pathways, the decision support system behind 111 and some 999 providers, to provide real-time information for patients about the right place to go. AAL2 enabled.
• Electronic Referral Service (e-RS) - provides an easy way for patients to choose their first hospital or clinic appointment with a specialist. Bookings can be made online, using the telephone, or directly in the GP surgery at the time of referral. AAL2 enabled.
• Electronic Staff Record (ESR) - an integrated hire to retire workforce management solution for the NHS in England and Wales.
• EPS Clinical Prescription Tracker - allows prescribers and/or dispensers to check the status and location of a prescription.
• GP Appointments Data Dashboard (GPAD) - provides information about scheduled activity and usage of GP appointments at practice level.
• Manage Vaccinations in Schools (MAVIS) - digital tool designed to help school age immunisation service (SAIS) teams manage their vaccination programmes end to end. AAL2 enabled.
• Mesh Online Enquiry Services (MOLES)
• MESH UI - provides the ability to share data directly between health and care organisations and is the nationally recognised mechanism for this method of data sharing. AAL2 enabled.
• National Care Records Service (NCRS) - provides a free, quick and secure way to access national patient information to improve clinical decision making and healthcare outcomes. AAL2 enabled.
• National Document Repository (NDR) - allows GP practices to access, view and download digital Lloyd George records. Currently only available to GP practices in the Birmingham and Solihull (BSOL) area.
• NHS.net Connect (formerly NHSmail) - the national secure collaboration service for health and social care in England. It includes a full suite of collaboration and productivity tools based on Microsoft Office 365, such as Outlook for email and calendar, Teams for instant messaging and video calls, and Office for documents and spreadsheets.
• NHS Notify - allows organisations and services to send NHS App messages, emails, texts and letters to patients and the public more effectively. AAL2 enabled.
• Select People for Invitation (SPI) - digital service that enables NHS organisations to send communications for national and local campaigns using trusted data, inclusion and exclusion rules, and a simple interface designed for non-technical users.
• Spine - supports the IT infrastructure for health and social care in England, joining together over 44,000 healthcare IT systems in 26,000 organisations.
• Spine Alert Service
• Spine Reporting Service

Over the past few years, suppliers have been working hard with our onboarding team to migrate to NHS CIS2 Authentication. The table below shows the current known status for suppliers as they migrate:

• Engaged - we're engaged with the supplier. Please contact your supplier for their migration timelines. 
• Discovery - the supplier is engaged and investigating migration to CIS2 Authentication. 
• Implementation - the supplier is engaged and developing their solution to migrate to CIS2 Authentication. 
• In conformance - the supplier has completed all necessary assurance work necessary for migration. 
• Ready for beta / rollout - the supplier has a working solution with CIS2 Authentication and is ready to provide this to customers. 
• Live - the supplier system has a fully deployed CIS2 Authentication solution. 

The table also shows the status of supplier's integrations with Digitial Signature Service (DSS) for signing EPS prescriptions. Systems that are live with DSS can use any AAL3 authenticator to sign prescriptions. Systems that are not live are restricted to using smartcards.

If your system is not listed, we are not aware of any plans by the supplier to move to CIS2 Authentication. If your staff relies on this system, please encourage your supplier to reach out to our onboarding team at [email protected].

The following applications offer AAL2:

• Cervical Screening
• Manage Vaccinations in Schools (MAVIS)
• NHS Notify (WebUI) 
• Data Landing Portal (DLP) 
• Directory of Services 
• NCRS 
• Palantir - Foundry (Federated Data Platform) 
• MESH UI 
• e-RS

AAL2 is a level of security that offers additional authenticator options. With AAL2 enabled, users can log in with all our authenticators:

• smartcards via HSCN
• smartcards via internet
• Windows Hello
• security keys
• iPad app
• Microsoft Authenticator
• NHS.net Connect (formerly NHSmail)
• passkeys

If AAL2 is not enabled, Microsoft Authenticator, NHS.net Connect and passkeys cannot be used to authenticate.

If you have a system that is not on this list, and which users log in to using a smartcard or other authenticator, complete this form.