1. In order to register for an account, you can follow the Create Account link from the login page which will present you with the registration page for the system.
2. Enter your name, email address and password.
3. Click Submit.
4. To finish creating your account, you need to confirm your email address by completing the verification process within 24 hours.

Note: If your email address ends in nihr.ac.uk, there is no need to register for an account, you can sign in using your existing NIHR Hub credentials without completing the registration process.

If you are already registered on the system and try to re-register, an error message will be displayed after submitting the form.

If this error is seen, please refer to the Account Verification and Password Reset sections for guidance on how to proceed. Should the issue persist after this, please refer to the Further Help Needed section for information on how to contact the support team.

To finish creating an account, you need to confirm that you own the email address that you used to create the account. After registering for the system, you will receive an email from identity@nihr.ac.uk containing a link to confirm your registration which is valid for 24 hours.

If you can't find your confirmation email you should:

• Check your junk mail folder
• Contact your local IT team to see if this has been blocked

If an account is registered on the system but is not confirmed within the initial 24-hour period, you must re-verify the account before you can log in. This can be done on the Resend Confirmation page.

Accounts can be locked for several reasons, including 5 successive failed login attempts or something going wrong during the registration process. When your account is locked, you will not be able to request a password reset and will see the following error message when trying to log in to your account.

How account locking works:

1. A user tries to log in with an incorrect password for 5 consecutive attempts.
2. The user account will be locked for 5 minutes.
3. After 5 minutes, the account will be unlocked.
4. If the correct password is entered, the user can successfully log in. If you can't remember your password, you can now request this from the Forgot Password page.
5. If the user tries to enter an incorrect password for another 5 consecutive attempts, the account lock period will be incremented by 2 times the previous lock duration. i.e. the account will be locked for 10 minutes
6. If the user attempts to enter an incorrect password for another 5 consecutive attempts, after the wait time (10min), the account will be locked again for 20 minutes and so on.

Time for an account to unlock is calculated by 5 minutes x (2 ^ Account lock count excluding the initial occurrence)

How account unlocking works:

Accounts can only be unlocked by two methods:

1. Logging in with the correct password following the account lockout period
2. Use the Forgot Password page to reset your credentials.

Note: If you try a password reset whilst your account is locked, you will not receive an email. You must wait for the lockout period to expire before either trying to log in again or requesting a password reset.

Should the issue persist after this, please refer to the Further Help Needed section for information on how to contact the support team.

1. In order to register for an account, you can follow the 'Create Account' link from the login page which will present you with the registration page for the system.
2. Enter your name, email address and password.
3. Click Submit.
4. To finish creating your account, you need to confirm your email address by completing the verification process within 24 hours.
5. In order to reset the password on an account, you can follow the ‘Reset Password’ link from the login page which will present you with the reset password page for the system.
6. Enter your email address.
7. Click Submit.
8. To finish resetting your password, you need to follow the link in a confirmation email sent to your email address within 24 hours.

You won’t receive a confirmation email with a link if your account is locked or you do not have an account registered with this email address.

Should the issue persist after this, please refer to the Further Help Needed section for information on how to contact the support team.

Note: If your email address ends in nihr.ac.uk, your password is the same as your NIHR Hub credentials. If you have forgotten the password for your NIHR account, contact the NIHR Service Desk for support by email or by calling 0207 333 5060.

1. To change the password on your account, you must first log in to the Portal.
2. Once logged in, click on the Change your email link.
3. Complete the form and log out for the change to apply to your account.

What is it?

Email One Time Passcode, also referred to as Email OTP is a form of Multi-factor Authentication (MFA) applied to Identity Gateway (IDG) accounts. This adds an extra layer of security to protect your account. A one-time passcode is a unique code that is automatically sent to the registered email to verify your account.

How does it work?

1. After successfully signing into your account, you will be directed to the “Email Verification” page.
2. At this point, an email will automatically be sent to the email address you are trying to sign in with from identity@nihr.ac.uk which is valid for 15 minutes.
3. You will need to enter the 6-character code provided in this email into the Email Verification screen and then select authenticate.

When you successfully enter the Email OTP code and press authenticate, a cookie is automatically applied to your Web browser. This cookie will remember your device for 30 days before expiring. Once expired, you will be prompted to enter another Email OTP code when you next sign in.

How often do I need to enter the passcode?

A new passcode will be required for each of the following scenarios:

• Every 30 days, after the previous cookie expires
• Signing in on a new unauthenticated device
• Signing in through a new unauthenticated web browser (includes private windows)

What if I don’t have access to this email?

You will need to update the email address associated with your account to one that can receive emails. Please see the Changing your email address section.

What do I do if I don't receive the email?

If you have not received the email containing a code within 15 minutes, check your Junk/Spam folder. If still unsuccessful, check with your local IT support to check the email is not blocked or held and that identity@nihr.ac.uk is on your safe sender's list.

If your issue persists after attempting the above, see the Further Help Needed section on who to contact for support.

What do I do if I see an error message?

If you are seeing an error message, please try the following:

• Check you are entering the correct code / manually type the code into the provided box, making sure there are no white spaces included
• Use the “Resend Code” option to receive a new code to authenticate your account
  • Note, that using this will automatically invalidate the original and any previous codes (so this can no longer be used), and provide you with a new code
• Close down your browser and then sign back in

An error message will be shown for the following reasons:

• Your code has expired (more than 15 minutes have passed)
• Another new code has been requested (e.g. by another user of a shared account)
• The wrong code has been entered
• 30 minutes have passed and your session has expired
• You have not entered a code

Who do I contact if I have an issue?

Please see the Further Help Needed section

General Data Protection Regulation (GDPR) was introduced in 2018, requiring consent to the storage and processing of personal data on NIHR systems.

In the context of the Apps Portal (https://portal.nihr.ac.uk), the user will be prompted to provide consent to the transference of personal data between the identity provider and the end application, with the purpose of validating credentials and ensuring the users have access to the correct and appropriate application.

As things stand, the NIHR Hub acts as a separate entity, therefore consent is provided as part of the AUP acceptance. The steps to providing consent, or otherwise, are listed below alongside a diagram illustrating this.

1. To proceed you have to tick certain fields and you “tick” to confirm your consent to certain data being used The “data list” will be different for each system. The linked Privacy Notice tells you more about how your data is used within the system. If there are optional fields and you do not select them then that data will not be transferred from the login provider (IDG) to the actual system you are trying to use.
2. To proceed you tick a box to confirm that you will adhere to the system Terms and Conditions and are content with the Privacy Policy.
3. If you choose the “Cancel” option then the login process is stopped and the user is redirected away from the next screen. The user can complete the process again at a later point if required. Anyone wishing for the initial data provided to be deleted should contact the Service Desk.
4. If you use multiple systems you may end up going through multiple consent screens. Once you have Accepted each system’s consent you will not be prompted again.

If you require further assistance with logging into your account or experience any technical issues, contact rdn.servicedesk@nihr.ac.uk by email or by calling 0207 333 58 94.