One Identity, Seamless Access.
The secure Single Sign-On gateway to Kenya's NT-RMS ecosystem. One account,
verified once.
One Trusted Identity For
Every Connected Service
Verify once
Sign in a single time with MFA-backed credentials — TOTP or SMS verified against the national register.
Access everywhere
Move between NT-RMS, budgeting, and audit tools without re-authenticating, within your authorized permissions.
Stay accountable
Every session and credential grant is recorded to an immutable, auditable trail across NT-RMS systems.
What The SSO Actually Does
The secure Single Sign-On gateway to Kenya's NT RMS ecosystem
Compliant with the most rigorous security and sovereign standards
Frequently Asked Questions
What is NT-RMS Auth?
It is the Single Sign-On gateway for Kenya's digital government services. Instead of creating a separate login for every system, you verify your identity once with the SSO and use that same account to access NT-RMS and every other connected service.
Why Do I need the SSO to Access NT-RMS
To ensure high-level security and auditability. Instead of every platform managing its own login system, the SSO centralizes security, making it harder for unauthorized parties to gain access to national revenue data.
Who Can Register For an SSO Account
Government Officers: Staff from Ministries, Counties, Departments, and Agencies (MCDAs) authorized to manage revenue.
How do I create an SSO account?
For government officers, your account must be initiated by your MDA Admin and finalized via an email invitation.
I have not received my One-Time Password (OTP). What should I do?
- Wait at least 2 minutes; network delays can occur.
- Check your "Spam" or "Junk" folder if the OTP was sent via email.
- Ensure your mobile number is correctly input.
- Click "Resend OTP." If the issue persists, contact TNT Helpdesk.
Can I share my SSO credentials with a colleague?
Strictly No. SSO accounts are tied to your legal identity (National ID/Staff ID). Sharing credentials is a violation of the NT-RMS Terms & Conditions and the Computer Misuse and Cybercrimes Act. Every action taken under your User ID is legally attributed to you.
Is Multi-Factor Authentication (MFA) mandatory?
Yes. For all users and transactions, MFA is a mandatory requirement to protect against identity theft and fraudulent revenue entries.
What happens if I lose the phone used for MFA?
You will need to undergo an identity verification process to reset your MFA settings. Contact your MDA Administrator (for government staff) or the NT-RMS Support Team (for users) to initiate a secure reset.
How often should I change my password?
Per the National Treasury Security Policy, users are prompted to update their passwords every 90 days.
Why is my account locked?
Accounts are automatically locked after five (5) consecutive failed login attempts. This is a security measure to prevent "brute-force" hacking attacks. Your account will remain locked for 30 minutes, after which you can try again or use the "Forgot Password" link.
I logged into the SSO but I cannot see the NT-RMS dashboard. Why?
The SSO confirms who you are, but your permissions are managed within NT-RMS. If you cannot see your dashboard, your MDA Admin may not have assigned you a specific role yet. Please contact your supervisor to confirm your role assignment.
Can the SSO work offline?
No. The SSO requires a secure internet or Government Common Core Network (GCCN) connection to validate credentials against the central identity vault in real-time.
Where can I get further assistance?
- Self-Service: Visit the "Help" section.
- Email Support: sso.support@treasury.go.ke
- Phone Support: +254 20 271 2345