https://www.slab.org.uk/solicitors/training-e-learning-and-laol/legal-aid-online-ongoing-issues-and-workarounds/multi-factor-authentication-mfa-for-users-of-laol-updates-and-guidance/
https://www.slab.org.uk/solicitors/training-e-learning-and-laol/legal-aid-online-ongoing-issues-and-workarounds/multi-factor-authentication-mfa-for-users-of-laol-updates-and-guidance/
To increase the security on our systems we are introducing Multi-Factor Authentication (MFA) for users of Legal Aid Online (LAOL).
We have taken the decision to move to the Scottish Government’s ScotAccount as a secure and simple way to access our online service.
This section has news updates and guidance to help users set up MFA and deal with any issues.
If you have any questions, please email us at onlineMFA@slab.org.uk.
Everyone logging into LAOL will be required to use ScotAccount – solicitors, support staff and law accountants.
ScotAccount is the Scottish Government’s secure and simple way to access our online service.
Please ensure other members of your firm are made aware of this if they don’t receive email updates from us.
The ScotAccount service is already used by a number of government services. You may already have signed up to use ScotAccount to access services such as applying for a Level 1 disclosure with Disclosure Scotland or a disclosure for the Protecting Vulnerable Groups (PVG) scheme
ScotAccount is one account which allows you to sign into a variety of services.
It will prove your identity when using our service. This will enhance the protection already on our systems.
We are aiming to implement the change towards the end of the first quarter in 2026.
Each user of Legal Aid Online should have an individual logon and password as per our terms and conditions (see Section 4)
As well as being a security risk, if different people are using the same logon details it also means we don't know who is using the system and this can cause audit issues.
Using the LAOL administration function, you can select users to have full access to your cases in the user profile section.
As we update you on the steps required, we will create and release guidance videos to help you at each stage.
It is important that you check the email address that is currently listed for your LAOL user account.
We have created a video that explains how you check and – if necessary – update the email address we hold for you.
Each person that will be signing into LAOL must have a unique ScotAccount account created using an email address unique to you.
To ensure a smooth and secure transition, the email address used to create the ScotAccount you use to access LAOL must be the same as the email address we hold for you on LAOL.
You do not need to create your ScotAccount now – we will be back in touch with further advice.
For security reasons, generic or shared firm email addresses such as ‘Reception@firm.co.uk’ are not acceptable. You must use an email address unique to you.
Please take time now to check the email address details we hold. Consider if this is the email address you will want to use with ScotAccount.
The video below shows you how to check your email details.
Please note that, while ScotAccount can also be used to access services in your own/personal capacity at home, we would recommend you use or create a ScotAccount using your work email address to access LAOL.
Closer to the implementation date we will hold webinars on the MFA login process and answer any questions.
More information on dates to follow.