Two-Factor Authentication for Nexus

Who needs two-factor?

• From August 2024 all users with access to identifiable pupil/child level information through Nexus will require Two Factor Authentication to be in place. More information can be found here.
• Other users can use two-factor authentication for additional security but are not required to.

Two-factor authentication app - where to download?

If you have any permissions granting access to identifiable pupil level information in Nexus, you will need to download a two-factor authentication app onto a phone/tablet (Android or IOS devices).

There are many free apps available over multiple platforms and you can use most of them. Google and Microsoft both have authenticator apps that will work on Android and IOS devices and are used by many Local Authorities for internal purposes. 

You may already have a two-factor app installed for use on other platforms, if so, then you can use this for logging into NCER Nexus. The phone/tablet can be a personal device and does not need to be work provided since it is only assuring your possession of a known device. 

Using a phone or tablet app to log into NCER Nexus - Initial set up

1. Go to https://www.ncer.org/Login.aspx and log in as normal with your username and password.
2. You'll be presented with a new screen that has a QR code you can scan. 
3. Open up the app store on your phone, search for and install the app you want to use, such as Microsoft Authenticator.
4. If you do choose Microsoft Authenticator, you'll be presented with a number of screens asking you to sign in, you don't need to sign in, skip past all of the initial screens.
5. You'll then have an opportunity to add your first account, choose other account if you're using Microsoft Authenticator but in other apps, you might not need to choose a type of account.
6. You can then scan the QR code that you will see on your computer screen when you log into Nexus.
7. Your Nexus account will automatically be linked to your app, select the account in your app and you'll see your verification code.
8. Once you have entered your verification code into the box on the Nexus page you'll need to log into Nexus again.
9. The second time you will just be asked for your two-factor code, check the number in your app again and enter this to complete the setup and login process. 

Subsequent log-in after set up

After your phone is set up for the first time it will constantly generate codes for accessing Nexus:

1. Open Nexus and enter your username and password
2. Tick to accept the terms and conditions of use
3. Open your authenticator app
4. Add the code that has been generated when asked to do so
5. If the code was close to expiry you may need to repeat this step

Resetting Two Factor Authentication

To help Nexus Administrators, the 'reset two-factor authentication' button will be available on the account pages for all users in their own LA. This means that if someone can't log into their account because of an issue with their two factor authentication, they won't need to contact Nexus Support anymore, they will be able to contact their LA Admin for it to be reset. Admins can access this through the Users page by clicking on their user name and scrolling to the bottom right to see the button:

In addition to any issues, this button may also need to be used where a user changes their phone and has to reinstall their Authentication app. 

Troubleshooting any issues

If you experience any issues after following this guidance, please either email [e-mail] or call 0845 129 7197.

Go back to 'Logging into Nexus'