Following a recent update to our login systems to meet NHS security standards, some users may find they are blocked from signing in to Accurx using the "Continue with NHSmail (nhs.net)" button.
This typically happens when your NHSmail account is labelled as an "Application Account" by NHSmail.
What is an Application Account?
An Application Account is an account for a machine rather than a person.
In the NHSmail system, these are "non-human" accounts used by software to do background tasks, like an automated no-reply@example.com email address that sends out notifications but isn't a real person you can talk to.
Because these accounts are meant for "machines" to use automatically, they aren't allowed to "interact" with a login screen. Our new security update requires every login to be tied to a real person, so if your account is labelled as a "machine" (Application) account, the system will block the sign-in.
You can read more about application accounts here: https://support.nhs.net/knowledge-base/application-account/
Why is this happening?
We require users signing in to Accurx via NHSmail Single Sign On to use a Standard User Account rather than an automated "Application" account.
While these accounts previously worked with Accurx, our updated security configuration now blocks these accounts from logging into Accurx.
How to tell if you are affected
If you are affected by this change, you will see an error message when trying to log in that mentions "scoping" or "unauthorised access."
It is difficult to tell if your account is an Application Account just by looking at your email address.
If a shared/generic account is affected, you should switch to using your own individual NHSmail address. This is the most secure way to use Accurx and ensures you meet NHS security standards.
Please note that using generic accounts is against both the Accurx Terms of Service and our Acceptable Use Policy. We do not support the use of shared logins because they make it difficult to maintain a clear audit trail of who is accessing patient data.
How to fix this if your individual account is blocked
This block cannot be removed by Accurx, as the setting sits within the NHSmail system. However, your IT team (Local Administrator) can fix this for you by following the steps linked here: https://support.nhs.net/knowledge-base/convert-application-account-to-user-mailbox/
Once your account has been converted, you will be able to log back into Accurx immediately using your NHS credentials.
Using generic accounts is against both the Accurx Terms of Service and our Acceptable Use Policy.
If you still have any questions or concerns, feel free to chat with us using the green message bubble in the bottom right-hand corner of this page. 👉