Schools Digital tech docs
Skip to main content

Apply for Qualified Teacher Status in England - Authentication

Currently our application has 2 types of users:

  1. Teacher (applicants)
  2. Staff (Ops team e.g. assessors)

Teachers

Currently our applicants/teachers use GOV.UK One Login in order to sign into our application and create or see their application forms.

We have adopted GOV.UK One Login using OpenID Connect via the OmniAuth gem and OmniAuth OpenID Connect gem. The service uses the shared DfE sector identifier. The integration is configured in the OmniAuth initializer.

Staff

Currently our staff members use Microsoft Entra ID in order to sign in and assess applications.

Staff authentication integrates Microsoft Entra ID via the OmniAuth Entra ID gem and Devise gem. The provider is configured in the Devise initializer and enabled on the Staff model.

Client secrets have configured expiry dates in Microsoft Entra ID. Check these dates and renew secrets before they expire to avoid interrupting staff sign-in.