DSCC Online: Multi-factor Authentication

The UK Government’s Defence Solicitors’ Costs Office (DSCC) will mandate multi-factor authentication (MFA) for all DSCC Online users beginning in early September 2026. This security measure requires users to verify their identity through multiple steps when logging in, adding an additional layer of protection against unauthorised access. The change aims to strengthen the integrity of the service by ensuring each user has a unique account, as shared logins will no longer be permitted. The DSCC has stated this move is part of its ongoing commitment to improving the security of its digital services. Users will receive detailed instructions on the MFA enrolment process ahead of the implementation date.

All existing DSCC Online users will be contacted directly by the DSCC to confirm their individual accounts and provide guidance on the upcoming MFA requirements. The communication will outline the steps needed to enrol in the new authentication system before the September 2026 deadline. Organisations requiring new accounts to prepare for MFA are instructed to email the DSCC administration team at dsccadmin@dutysolicitors.org, with “MFA - New Account” included in the subject line. The DSCC has emphasised that shared accounts will not be supported under the new security framework. Further support materials will be made available to assist users during the transition.

The introduction of MFA follows a broader government initiative to enhance cybersecurity across public sector digital services. The DSCC has highlighted that unauthorised access risks, such as data breaches or fraudulent activity, are significantly reduced when MFA is implemented. The phased rollout includes advance notice to all users, ensuring they can prepare for the change without disruption to their workflows. The DSCC has not specified penalties for non-compliance but has indicated that accounts without MFA may face restricted access after the implementation date.

The DSCC Online service supports legal professionals handling defence solicitors’ costs, and the MFA requirement applies uniformly to all users, including solicitors, administrators, and support staff. The DSCC has advised organisations to review their account management practices ahead of the 2026 deadline to ensure compliance. The transition to MFA is expected to take several months, with the DSCC providing ongoing updates and assistance throughout the process. Users are encouraged to monitor their email for further instructions and to contact the DSCC admin team for any account-related queries.