From 9 September 2026 licensed sponsors cannot create Level 2 users in the Sponsorship Management System (SMS), and Level 2 access ends on 8 March 2027. A new manual covers multi-factor authentication.
Key facts
- Who: All licensed sponsors using the Sponsorship Management System (SMS), in particular those with Level 2 users
- From: 9 September 2026 (no new Level 2 users); 8 March 2027 (Level 2 access ends)
- Source: SMS guide 1: introduction and managing user access (accessible)
Updated guidance: SMS guide 1 was last updated on 5 October 2026.
Guide 3 of SMS guide 1 states: "From 9 September 2026, you can no longer appoint Level 2 users." The guide adds that a Level 2 user cannot be created from that date, and it refers sponsors to SMS Manual 13, Multi-Factor Authentication.
Level 2 users will no longer be able to access the SMS from 8 March 2027. Any user who needs to keep access must be added as a Level 1 user, and the Level 2 user account must then be deactivated.
Level 2 users have restricted permissions. They can assign Certificates of Sponsorship (CoS) and Confirmations of Acceptance for Studies (CAS), and report activity only on those they created and assigned. They cannot view or use the Licence summary, applications and services menu or the Defined CoS sub-menu, and they cannot see the message screen shown to Level 1 users on login.
Manual 13, "Multi-factor Authentication", is listed as a common manual for all sponsors. Its stated purpose is to provide an extra layer of security for an SMS account. Guide 1 says that if multi-factor authentication (MFA) has been enabled on a sponsor licence, users should refer to Manual 13 and follow the steps in its Guide 1. The glossary now includes MFA and One Time Passcode (OTP).
The guide lists 13 SMS manuals, plus a supplementary policy guide for completing a CAS.
What this means for applicants
Sponsors cannot add any new Level 2 users from 9 September 2026. Sponsors with existing Level 2 users who need them to keep access must add them as Level 1 users and deactivate the Level 2 accounts, because Level 2 access ends on 8 March 2027. Requests for new Level 1 users are submitted to the Home Office for assessment. The guide says a deactivated user account cannot be reinstated and a new Level 1 user request is then required.
Sponsors with MFA enabled on their licence should follow Manual 13 when logging in for the first time.
Related guide
Sponsorship requirements for Skilled Worker
Sources
- SMS guide 1: introduction and managing user access (accessible), UK Visas and Immigration, GOV.UK