Before you can log into the SDHS, you will need to create a Signify Account. For this you will need your Signify Welcome Pack and the Welcome Email.
Your RSA SecurID from Signify token, similar to this:
Or been allocated a Software token, the guide to download and set this up will have been sent by email to you by signify-registrations@nccgroup.com
You will shortly receive a Welcome E-mail that will indicate which organisation has requested the Signify service for you.
Signify is the Secure Authentication Service. We are dedicated to helping you protect your personal digital identity and secure your sensitive on-line information.
Using passwords to prove your identity when accessing on-line systems is not secure. Passwords are easily stolen, meaning your digital identity can be used without your knowledge. You should not rely on passwords to secure business critical systems or data.
SecurID from Signify is a managed, on-line service that delivers Identity Assurance by combining a secret PIN (Personal Identification Number) with a physical device, your unique RSA SecurID token.
When you want to access your Organisation's systems, you must prove you are in possession of both of these factors. This 'two factor' authentication is similar to using the cash machine at your bank, where, to verify your identity, you must present both a card and a PIN.
Signify now gives you the same level of security when working on-line, with complete confidence that no-one can steal your digital identity.
The number on your SecurID token changes every 60 seconds and it is impossible to predict the next number. When you log in to systems protected by Signify, you simply enter your secret PIN followed by the current number on your token to create a unique 'one-time' passcode.
Without your token, no one can pretend to be you. Even if someone finds your token, they cannot log in if they do not know your secret PIN. And if someone eavesdrops on your session and is then able to decrypt your passcode it is useless as a one-time passcode can never be re-used.
Before you can use your token for the first time, you need to register with Signify. This only takes a few minutes and will confirm to Signify that you have received your token and your Welcome E-mail safely.
At this point, your account will be activated and you can connect securely to your Organisation's systems.
Please first read the Rules of Use detailed at the back of this booklet.
Your service has been pre-configured with a Signify Account ID and Reference Code that have been sent to you in your Welcome E-mail.
Please make sure that you have received:
Signify Account ID and Reference Code
During the registration process, you will need to create a PIN which is secret and memorable to you. You must make sure that you do not reveal your new secret PIN to anyone – please memorise it.
If your Welcome E-mail has not arrived, you can visit the Signify Self Service End User Helpdesk (see page 12) and click on the link 'I have not received my Welcome E-mail'.
If this link does not work for you, go to https://registration.signify.nccgroup.com/#/login. There you can enter your Account ID and Reference Code which are given in your Welcome E-mail.
Important Note about your contact details: Should you need us to replace your token or PIN, for security reasons we will need to send the replacement by post, e-mail or SMS to one of the addresses or phone numbers that you have previously registered with us. Therefore it is important that you register all of your appropriate postal addresses, e-mail addresses and phone numbers with us so we can deliver the replacement to the most convenient location at the time.
You use a new 'one-time' passcode every time you log in. You simply type your secret PIN followed by the number currently displayed on your token. For example:
then in the passcode field you should enter: 123xyz675231
If you can finish typing your passcode, do so and click the Go button and Signify will accept it if it has been entered correctly.
However, if you have typed only half of the number and cannot remember the remainder, you must start afresh by entering your secret PIN followed by the next number displayed on your token.
These six bars count down the time remaining until the next number change: each bar represents 10 seconds remaining.
Therefore it is best not to start typing the token code when there is only a single bar left, but to wait a few seconds for the new number to appear and then type at your leisure.
You will find yourself at your personal My IMC page: take a few minutes to check all the useful information about your Signify service.
You are ready to connect securely to your Organisation's systems (see below). Please now attach your Signify token to your key ring and read the Rules of Use printed at the back of this booklet.
What is the Identity Management Centre (IMC)?
This is your personal interface to Signify where you can find and manage all the information about you, such as how to:
To access My IMC go to https://imc.signify.nccgroup.com/ log in with your Signify Account ID and passcode and you will be taken to My IMC.
You only use your Signify Account ID to log into the Signify website and access My IMC (your registered email address can also
be used).
Whenever you log in to your Organisation's systems, you should use the appropriate username that you have been allocated on that system: there is a reminder of your usernames at My IMC.
Simply log into https://imc.signify.nccgroup.com/ and click on the ? button next to the log in box. Type in any one of your registered e-mail addresses and the system will automatically fill in your Signify Account ID.
If your token is lost, damaged or faulty, it is your responsibility to report it to Signify as soon as possible, otherwise the security of your information is at risk.
Go to https://helpdesk.signify.nccgroup.com/#/help, where you will be taken through a step-by-step process to register your token as lost or broken.
Depending on your Organisation's service and security levels:
CSCS will be notified of any loss and you will be charged £75 for your replacement token. Faulty tokens will be replaced free of charge.
Go to My IMC. Select the option to change PIN. Follow the straightforward on-line instructions. It is good practice to change your secret PIN regularly, and it is essential that you change it if you suspect that someone else has found out what it is.
Go to https://helpdesk.signify.nccgroup.com/#/help and choose the appropriate option. You will then be stepped through a security process. After you have completed this, a replacement PIN will be automatically sent to you by e-mail or SMS to one of your registered addresses/ numbers.
You should then visit https://imc.signify.nccgroup.com/ and log in to My IMC using this replacement PIN and your current token code. You will then be prompted to create yourself a new secret PIN.
At the point you no longer have a need for your Signify token, inform either your organisation's IT helpdesk or Signify administrator. They will then carry out the appropriate action.
If you have a problem with your Signify token or service, you
can use the Signify Self Service End User Helpdesk to resolve it. Visit https://helpdesk.signify.nccgroup.com/#/help or follow the Helpdesk link on the Signify website.
This should be your first step to get help. It will answer most of your queries about the Signify Service and help you to solve most problems quickly and easily.
If your Organisation has provided you with this level of service you may also have telephone access to the Self Service End User Helpdesk.
If you are authorised to access this service, its number will be shown in your Welcome E-mail. Please take a moment to add this number to your records.
If your problem is not with your Signify token but relates to the other services offered by your Organisation, please direct your queries to their support service. Where possible, information about these will be available via My IMC.
Signify website: https://helpdesk.signify.nccgroup.com/#/help
Important – Rules For Using The Signify Service
These Rules of Use apply to your use of the enclosed Signify token or other device (your Device), your secret Personal Identification Number (your PIN) and your use of the Signify Service (the Service).