The Sponsorship Management System (SMS) is the online portal where UK visa sponsors manage their sponsorship licence and assign Certificates of Sponsorship to workers. Only licensed sponsors can access this system.
All sponsors must use the SMS to fulfil their sponsorship duties. Updated SMS manuals were published on 11 September 2026, including detailed guidance on managing user access and multi-factor authentication requirements.
Who Can Log In to the SMS Portal?
Not everyone in your organisation can access the SMS. The Home Office sets clear rules about user access.
Level 1 Users
Level 1 users have full administrative control over the SMS account. They can:
Add, edit, or remove other users
Assign Certificates of Sponsorship
Update sponsor licence details
Last verified against official UK government sources.
Approve and withdraw CoS assignments
Respond to Home Office requests
Every sponsor licence must have at least one Level 1 user. According to SMS Guide 1, Level 1 users are typically senior managers or directors who are named as key personnel on the sponsor licence application.
Level 2 Users
Level 2 users can perform day-to-day sponsorship tasks but cannot manage other users. They can:
Assign Certificates of Sponsorship
Update worker details
View reports and compliance information
Download CoS reference numbers
Level 2 users are often HR managers, immigration coordinators, or recruitment staff who handle visa sponsorship regularly.
User Creation Process
Level 1 users must create all other SMS user accounts. The SMS portal guidance states that each user needs a unique email address and must be a genuine employee or authorised representative of the sponsor organisation.
How to Access the Certificate of Sponsorship Login
The certificate of sponsorship login process requires your SMS credentials and, from September 2026, multi-factor authentication.
Step 1: Navigate to the SMS Portal
Go to the SMS landing page. This is the official Home Office portal—do not use any third-party sites claiming to offer SMS access.
Step 2: Enter Your User ID and Password
Use the User ID and password that were set when your account was created. Your User ID is not the same as your email address—it is a unique identifier assigned by the SMS system.
If you are logging in for the first time, you will need to use the temporary credentials sent to your registered email address. You must change your password on first login.
Multi-factor authentication adds an extra security layer. After entering your password, you will be required to verify your identity using a second method, such as:
A one-time code sent to your registered mobile phone
An authentication app (such as Google Authenticator or Microsoft Authenticator)
A hardware security token
You must set up MFA when prompted by the SMS portal. Without MFA enabled, you will not be able to complete the login process once the requirement is active for your organisation.
Step 4: Access Your SMS Dashboard
Once authenticated, you will reach the SMS home screen. From here, you can navigate to the sections you need, such as assigning a Certificate of Sponsorship or updating worker records.
Security Requirements and Best Practice
The Home Office has strict security rules for SMS accounts to protect sensitive immigration data.
Password Requirements
Your SMS password must meet the following criteria:
At least eight characters long
Contain a mix of uppercase and lowercase letters
Include at least one number
Include at least one special character (such as !, £, $, or %)
Passwords expire periodically. The system will prompt you to create a new password before your current one expires.
Account Lockout Rules
SMS Guide 1 explains that if an incorrect User ID or password is entered three times in succession, the account will be temporarily locked. Users should wait 20 minutes before attempting to log in again. Repeated failed login attempts may result in longer lockouts or require administrator intervention.
User Responsibilities
All SMS users must:
Keep their login credentials secure and not share them with others
Log out of the SMS portal when finished
Report any suspected security breaches to the Level 1 user or Authorising Officer
Use the SMS only for legitimate sponsorship purposes
The Home Office may audit SMS activity. Misuse of the system can lead to licence suspension or revocation.
Common Login Problems and Solutions
Employers frequently encounter login issues. Here are the most common problems and how to resolve them.
Forgotten User ID
Your User ID is sent to your registered email address when your SMS account is created. If you cannot find this email, contact your organisation's Level 1 user. They can look up your User ID in the SMS user management section.
Forgotten Password
If you have forgotten your password, use the "Forgotten Password" link on the SMS login page. You will need to answer your security questions and provide your registered email address. A password reset link will be sent to that email.
If you cannot remember your security question answers, your Level 1 user will need to reset your account.
Account Locked After Failed Login Attempts
Wait 20 minutes and try again. If the problem persists, contact your Level 1 user. They can unlock your account from the user management section of the SMS portal, as described in SMS Guide 1.
Multi-Factor Authentication Issues
If you are not receiving MFA codes on your mobile phone:
Check that your registered phone number is correct in the SMS portal
Ensure your phone has signal and is not blocking messages from unknown senders
Try using an authentication app instead of SMS codes
If problems continue, your Level 1 user may need to reset your MFA settings.
Browser Compatibility Problems
The SMS portal works best with up-to-date versions of Google Chrome, Mozilla Firefox, Microsoft Edge, or Safari. Clear your browser cache and cookies if pages are not loading correctly. Avoid using Internet Explorer, which is no longer supported.
Using the SMS to Assign Certificates of Sponsorship
Once logged in, you can assign a Certificate of Sponsorship to a worker. The exact process depends on the visa route and type of CoS.
Defined and Undefined Certificates
There are two types of Certificate of Sponsorship:
Defined CoS: Used for workers already in the UK who are switching to or extending a Skilled Worker visa. Also called "in-country" applications. These do not require Home Office allocation; sponsors can assign them immediately.
Undefined CoS: Used for workers applying from outside the UK. Also called "entry clearance" applications. Sponsors must request an allocation from the Home Office before assigning undefined CoS, although many routes now offer automatic allocations.
SMS Guide 12 provides detailed instructions on how to request and assign both types of CoS through the portal.
Certificate of Sponsorship Validity
A Certificate of Sponsorship is typically valid for three months from the date of assignment. The worker must submit their visa application before the CoS expires. If it expires before the worker applies, you will need to assign a new CoS.
The salary requirement is the higher of the general threshold or the going rate for the occupation code. The general salary threshold is £41,700 per year, though some roles and circumstances have different minimums.
You must enter accurate salary details in the SMS when assigning a CoS. The Home Office will check this information during the visa application process.
Maintaining Compliance After Login
Logging in to the SMS is only the first step. Sponsors have ongoing compliance duties.
Reporting Duties
Sponsors must report certain changes to the Home Office within 10 working days, including:
If a sponsored worker does not turn up for their first day of work
If a worker's employment ends early
If a worker is absent from work for more than 10 consecutive working days without permission
If there are significant changes to the worker's job role or salary
You report these changes through the SMS portal. Failure to report can result in licence sanctions.
Record Keeping
Sponsors must keep copies of right-to-work documents, contracts, and payroll records for all sponsored workers. Sponsor Guidance Part 2 sets out detailed record-keeping requirements. These records must be produced if the Home Office conducts a compliance visit.
Annual Licence Renewal
Sponsor licences are typically valid for four years. Before your licence expires, you must apply for renewal through the SMS portal. The renewal process includes paying the licence fee and confirming that your organisation still meets the sponsor requirements.
SMS Updates and Future Changes
The Home Office regularly updates the SMS portal with new features and requirements.
These updates reflect changes to user access management, multi-factor authentication rollout, and portal navigation.
Staying Informed
Sponsors should regularly check the sponsorship information for employers collection for updates to guidance and SMS manuals. The Home Office also sends email notifications to Level 1 users when significant changes are made.
If you are unsure about any SMS feature or requirement, consult the relevant SMS manual or contact your organisation's Authorising Officer or Key Contact before taking action.
Conclusion
The certificate of sponsorship login is the gateway to managing your organisation's visa sponsorship responsibilities. By understanding the SMS portal access requirements, security rules, and multi-factor authentication process, you can ensure your team can assign Certificates of Sponsorship efficiently and maintain compliance with Home Office requirements.
Regular training for SMS users, clear internal processes for managing login credentials, and staying up to date with Home Office guidance will help your organisation avoid common pitfalls and keep your sponsor licence in good standing.
