The high-level design
The transaction consists of 4 stages.
1. Determining whether the user has a TRN or not
This aims to:
- filter out users without TRNs, so they don’t waste their time.
- inform those without TRNs about why they might want one, and how to get it
2. Authenticating the user’s email address
The email address is useful in a number of ways:
- to shorten the user’s journey if there’s an exact match to the email address on the Database of Qualified Teachers (DQT) record
- for auditing, insofar as capturing it prevents the transaction from being completely anonymous
- for emailing the TRN to the requester, if the transaction completes successfully
- for the fall-through to the helpdesk, if the transaction is unsuccessful
3. Matching the user’s responses to their DQT record
This step builds confidence that the requester is the TRN holder, while falling short of strict identity verification.
4. Displaying the TRN or handing-off to the helpdesk
If the user’s responses can be matched to an existing DQT record with enough confidence, the user’s TRN is shown. Otherwise, they can submit a helpdesk request to try to recover their journey.
Email authentication
We considered 3 options for authenticating the email address:
- using magic links currently being used in other DfE services like Apply for teacher training and Manage training for early career teachers)
- using one-time passcodes (currently being used in Register for an NPQ)
- with an account from GOV.UK Sign In
We have decided against GOV.UK Sign In as that product isn’t currently available for integration, and has no clear timeline when the integration will be available.
Magic links are (arguably) slightly easier than one-time passcodes on mobile devices. One-time passcodes are more appropriate in situations where the authentication happens across multiple devices. We don’t have any data to suggest either of these scenarios apply in our case yet, so we have picked magic links, as the more established solution within Teacher Services.
We may revisit this decision in future if circumstances change (e.g. if GOV.UK Sign In becomes available sooner than expected).
When the TRN is shown to the user
In this design, the TRN is shown to the user if the user’s verified email address matches one of the email addresses on a unique DQT record, or if any 3 of the following attributes match a single DQT record:
- exact match of first name and last name (these count as one match)
- date of birth
- National Insurance number (if one is present)
- exact name match of the ITT provider (if one is present)
This design uses fewer attributes than the existing phone and email processes, in order to initially reduce scope and complexity.
Process flow for the existing phone/email TRN reminder process
References for content and guidance
The TRN guidance on GOV.UK informed the design of the “Start” and “Do any of the following apply to you” pages.
The Get a Teacher Reference Number (TRN) guidance on the Register for an NPQ service (GitHub) was used to create the “You don’t have a TRN” page.
The language for describing ITT providers (“school, university or other training provider”) comes from Find postgraduate teacher training.
Previous names for the TRN came from the Register for an NPQ service (GitHub).