Broadband and so much more:      Get connected with LGfL

USO Identity Management and Authentication

Unified Sign-On (USO) gives every member of staff and pupil within a subscribing establishment a single username and password that simplifies and securely controls access to all supported services and resources. 

All LGfL schools will be allocated USO accounts for staff and pupils as part of the LGfL package. 

USO logo

USO Authentication Features

Personalised Experience

In USO’s second role, that of an authentication platform, USO must be able to respond appropriately to any subsequent query to determine whether or not to grant, or advise of the eligibility for, access to secured or otherwise restricted services, applications and resources, and to use the profile data to personalise the end user’s experience of online applications wherever appropriate. In many, but not all, instances, the aim is to enable a user to access services wherever they are entitled, but without revealing any more of the user’s status, location, or identity, than is absolutely necessary and as previously agreed between LGfL and the provider. This applies equally whether or not the application being accessed uses Shibboleth.

USO enabled services


Rated highly for its standards-based, privacy-preserving approach, Shibboleth® is now the recommended solution to the authentication and authorisation needs of all UK education sectors, through the UK Access Management Federation which was formed by Becta in conjunction with JISC and JANET (UK).

In its role as an Identity Provider (for both Shibboleth and non-Shibboleth applications) USO’s key purpose is to create and manage unique user account profiles and credentials that can guarantee clear identification of an individual, in the context of any query raised in response to those credentials being presented to a Service Provider (also whether that be Shibboleth or non-Shibboleth).

One secure key for all services and resources

USO is a secure Identity Provider and authentication system that gives a single username and password to every relevant pupil and staff member in an LGfL subscribing establishment. The system has been in use for over ten years and is an integral part of LGfL's services and resources wherever they are delivered. Currently USO is in use by some 1.1 million individual users in schools and Local Authorities across London.

Secure access to services and resources away from school

USO is applied specifically to services being accessed ‘off-net’ where licensing or other access restrictions may need to be applied, or anywhere the individual’s identity is required to complete the online experience (such as with email services, etc.). It is bypassed where on-net access is being employed and where IP authentication is sufficiently informative for the Service Provider to grant access. The accompanying Educational Content and Resources information showcases a wide range of resources that are available to school staff and pupils whilst in school (‘on-net’) via the National Education Network and also away from school (‘off-net’) via USO account credentials.

More from LGfL

Offers on Chromebooks and Windows devices

Below-Cost Devices from just £99.99

Chromebooks from £99.99 See the full range of devices

Save more than you spend and keep children safe

© Copyright LGfL  >  Privacy Notice and Policies  >  Accessibility

Registered Address: ​9th Floor, 10 Exchange Square, Primrose Street, London, EC2A 2BR. London Grid for Learning Trust - a charity whose mission is the advancement of Education. A company limited by guarantee registered in England no 4205579 Reg charity no 1090412.