What happens if I don't set up multi-factor authentication within the grace period?

The grace period is a set amount of time (usually two weeks) during which you can log in to the GCC without MFA after it becomes required for your account. This gives you time to access the platform while you prepare to set up your authenticator app.

Once your grace period expires, you will no longer be able to access the main features of the GCC until MFA is enabled. When you attempt to log in, you will be automatically redirected to the Multi-factor authentication preferences page to set up your app. You will not be able to navigate to other parts of the site until this setup is complete.

If you believe your grace period has expired in error, or if you have a legitimate business reason for needing an extension, please contact the support team at dst@cabinetoffice.gov.uk.

For guidance on setting up multi-factor authentication, please view this article.