The Sponsor Management System (SMS): A Practical Guide for HR Teams

Key Takeaways

• The Sponsor Management System (SMS) is the Home Office's secure online portal and its live record of your compliance. Every action you take in it is treated as evidence and can be inspected at any time.
• It is not optional. Once your licence is granted, the SMS is the only channel for assigning Certificates of Sponsorship, reporting changes and managing your licence.
• Four roles run the licence: the Authorising Officer is accountable, the Key Contact handles Home Office communication, Level 1 users carry out day-to-day tasks, and Level 2 users have restricted access, usually CoS assignment only. Only Level 1 and Level 2 users can log in.
• Report changes affecting a sponsored worker within 10 working days, and changes to your organisation within 20 working days, all through the SMS.
• During an audit, SMS data is compared against your HR, payroll and right to work records. A mismatch, such as a leaver still listed as employed, is treated as a breach, and the Home Office is moving towards real-time payroll cross-checking.
• Sponsor licences no longer need renewing, but your CoS allocation still renews annually. Do not confuse the two, and keep the allocation topped up so recruitment is never held up.
• Most SMS breaches are avoidable human error: leavers not removed as users, untrained staff assigning certificates, and missed deadlines. Poor SMS governance is a leading cause of downgrade, suspension and revocation.
• Good SMS governance is far cheaper than an action plan. WPC HR's compliance software keeps your SMS entries aligned with HR and payroll, tracks reporting deadlines and CoS validity with automated alerts, and our Sponsor Licence Compliance Audit checks your records against current guidance before UKVI does.

Introduction

If the sponsor licence is your permission to hire from overseas, the Sponsor Management System is where you actually exercise it. Every Certificate of Sponsorship you assign, every change you report, and every update to your organisation flows through this one online portal. To the Home Office, the SMS is not just an admin tool, it is the live record of how well you are meeting your sponsor duties, and it can be inspected at any time.

That is what makes the SMS a high-stakes system rather than a back-office one. A mistyped salary on a certificate can cost a candidate their visa, a leaver left showing as employed can be read as a reporting failure, and an old user account belonging to someone who left months ago can undermine your credibility during an audit. With sponsor enforcement at record levels in 2026, and around 3,100 licences revoked in 2025, the quality of your SMS management has a direct line to whether you keep your licence.

This guide is a practical walkthrough for the HR teams who run the system day to day: what the SMS is and who must use it, the roles and access levels, first login and user setup, assigning certificates, managing your allocation, reporting duties and deadlines, common mistakes, and how to build the SMS into your HR processes. For further background, see our group's guides to the Home Office Sponsorship Management System and the SMS guide for employers.

What Is the Sponsor Management System?

The Sponsor Management System is the Home Office's secure online portal through which licensed employers manage their sponsorship duties. Once your licence is granted, it becomes the single channel for assigning Certificates of Sponsorship, requesting and managing allocations, updating your organisation's and workers' details, and responding to UKVI. You can find the official entry point on GOV.UK at Sponsorship Management System sign-in.

The crucial point to understand is what the system represents. The Home Office relies on the SMS as a near real-time record of your compliance, so the information in it is treated as formal evidence. During an audit or compliance visit, inspectors compare your SMS entries against your HR files, contracts, payroll and right to work checks. If the data is inaccurate, incomplete or out of date, that is not just a tidy-up job, it can be a breach of your sponsor duties and can affect the visa applications tied to it. In short, the SMS is only as reliable as the information you put into it, and you are accountable for all of it.

Who Must Use the SMS, and for Which Routes?

Every organisation holding a valid sponsor licence must use the SMS to manage that licence, regardless of size or sector. There is no alternative way to carry out the practical duties attached to the licence, so each sponsor must nominate people who can access and operate the system. Employers sponsoring workers under any of the sponsored routes use the SMS, including the following.

For each of these, the SMS is the official channel for assigning certificates, requesting allocations, reporting changes and responding to Home Office requests. If your business depends on overseas talent under any sponsored route, correct SMS use is a mandatory condition of holding the licence.

The People Who Use the SMS: Roles and Access

The SMS works on the principle of defined roles, each with a different level of access. Getting the right people into the right roles, and reviewing those assignments regularly, is central to keeping control of your licence. The official summary of the sponsorship management roles sits on GOV.UK.

One person can hold more than one role if they meet the eligibility criteria, which is common in smaller organisations. There can be only one Authorising Officer and one Key Contact, but you may appoint as many Level 1 and Level 2 users as you sensibly need. Keep the number manageable, though, because the Authorising Officer is responsible for everything every user does. It is good practice to train all users properly, restrict Level 1 access to trusted staff, and remove accounts the moment someone leaves.

Getting Started: First Login and Setting Up Users

When your licence is first approved, the Home Office issues the initial SMS credentials. The first login ID is posted to the Authorising Officer named on the application, while the password is emailed to the nominated Level 1 user, and the Authorising Officer then passes the login ID to that user. From that first login, the rest of your user structure is built.

1. The first Level 1 user signs in and reads any messages on the SMS message board before doing anything else.
2. They request any additional Level 1 users needed. Each Level 1 request is submitted to UKVI for assessment before it is granted.
3. They create any Level 2 users required. Level 2 accounts are created automatically, without UKVI assessment.
4. If the Authorising Officer or Key Contact need access, they are added as a Level 1 or Level 2 user, because those roles alone do not grant a login.
5. Each user receives their own unique ID and password, which are personal and must never be shared.

Two habits pay off from day one. First, keep login details secure and have recovery arrangements in place, because a locked account at the wrong moment can hold up a certificate. Second, keep at least two trained Level 1 users active, so a single person's absence never leaves the licence unmanaged.

Assigning and Requesting Certificates of Sponsorship

Assigning certificates is the most frequent and most compliance-critical SMS task. A CoS must be assigned before a sponsored worker can apply for their visa, and errors here lead to refusals and wasted fees. Both Level 1 and Level 2 users can assign certificates.

Assigning a certificate

1. From the Workers screen, select Create and Assign, then the route and category.
2. Enter the worker's personal details and the job details, including SOC code, salary, start date, hours and location, then save.
3. Check everything carefully on the confirmation screen, because these details become the basis of the visa decision.
4. Select Assign, accept the declaration, and pay the CoS fee and, where applicable, the Immigration Skills Charge.
5. Give the resulting unique CoS reference number to the worker for their application.

For overseas Skilled Worker hires you first request a Defined CoS, which UKVI assesses, usually within one working day, before it appears in your account to assign. If a decision takes longer than that, do not withdraw and resubmit the request, because that resets the review clock and delays you further. There is also a batch option for assigning several certificates at once, which saves time where the employment details are shared.

Managing Your CoS Allocation

Undefined certificates are drawn from an annual allocation set when your licence was granted. This is one area where the old language of renewal still applies, and it should not be confused with the licence itself, which no longer needs renewing. Your CoS allocation runs on a 12-month cycle, and if you use it up you can ask for more.

A Level 1 user manages this from the licence summary area. Where you do not qualify for automatic renewal, you request renewal of the annual allocation and state how many certificates you need and why. To top up mid-year, you request a CoS allocation increase against the relevant route, again giving numbers and full reasons. The practical discipline is to forecast demand ahead of recruitment campaigns and request in good time, because running out of certificates mid-hire stalls onboarding and can lose you candidates.

Reporting Through the SMS: What and When

Reporting is where sponsors most often slip, usually because the information reaches the SMS user too late. The deadline depends on whether the change concerns a worker or your organisation. All reports go through the SMS and must be consistent with your HR and payroll records.

Within 10 working days: sponsored worker changes

Within 20 working days: organisation changes

Reporting a leaver

When you end a sponsored worker's employment or withdraw sponsorship, report it through the SMS within 10 working days. UKVI then acts on the report and issues any curtailment notice to the individual. The system depends on you reporting promptly, so a departure that is never recorded leaves the worker showing as sponsored and exposes you to a finding, and potentially a civil penalty, if the person continues working without permission.

Managing Key Personnel and Organisation Details

Only a Level 1 user can change key personnel, and the distinction between replacing and amending matters. Use the replace function only when a different person is taking over a role, and the amend function when the same person's details change, such as a new work address or contact number. When you replace an Authorising Officer, you also email a completed submission sheet to UKVI, signed by the new Authorising Officer, with supporting evidence.

Some requests are fulfilled immediately where set criteria are met, for example where the new person's postcode matches the organisation's main or head office address, the licence is fully active and you are A-rated. Where those criteria are not met, the request is considered manually. Similar rules apply to amending organisation details such as name or address, where you select an acceptable reason and, in most cases, still send a signed submission document with evidence. The key personnel point cannot be overstated: being left without an eligible Authorising Officer or your last eligible Level 1 user is a mandatory ground for revocation, so replacements must be made and reported promptly.

Licence Ratings, Action Plans and the Message Board

Your licence carries either an A-rating, the normal position, or a B-rating if UKVI finds breaches it considers serious but fixable. A B-rating comes with a mandatory action plan, carrying a fee of £1,579, which a Level 1 user must pay and accept through the SMS, normally within 10 working days. While B-rated you cannot assign new certificates, which effectively pauses overseas recruitment, and a licence can only be B-rated twice before it is lost.

The SMS message board is easy to overlook but important. Only Level 1 users can see it, and it carries notifications from UKVI, including reminders and requests that may have deadlines attached. Make reading the message board a routine part of every login, because a missed message is not accepted as an excuse for a missed deadline.

Common SMS Mistakes and How to Avoid Them

Almost all of these are avoidable human errors rather than breaches of the immigration rules themselves. The Home Office penalises weak process, so the fixes are process fixes: trained users, tight access control, second-person checks and a reliable flow of information into the SMS.

Building the SMS Into Your HR Processes

The most reliable sponsors treat the SMS as part of routine HR, not a separate specialist task. Embedding it into everyday workflows removes the reliance on one person's memory and gives you an inspection-ready audit trail.

1. Onboarding: confirm the correct CoS has been assigned and linked to the right visa application before the worker starts.
2. Offboarding: include SMS reporting of the leaver within 10 working days on the exit checklist.
3. Payroll and HR changes: route salary, role and location changes to the SMS user as a standard step, not an afterthought.
4. Board decisions: alert the sponsor team to mergers, relocations and restructures so organisation changes are reported within 20 working days.
5. Quarterly internal audit: reconcile SMS records against contracts, payroll and right to work files, and document the check.
6. User review: confirm every SMS user is current, correctly permissioned and trained.

The Direction of Travel: Live Monitoring and a Modernised Platform

Two trends are worth keeping on your radar. First, the Home Office is moving towards more continuous, data-led monitoring, cross-referencing sponsor records against sources such as HMRC payroll data rather than relying only on periodic audits. In practice this means the gap between what your SMS says and what your payroll shows is being closed automatically, so consistency between systems matters more than ever.

Second, the Home Office has been developing a modernised sponsorship platform, sometimes referred to as Sponsor UK, intended to streamline how sponsors manage their licences, with some functions already moving onto newer online services. For now, the SMS remains the system most sponsors use day to day, and the duties behind it are unchanged. The sensible response is to keep your data clean and your processes tight, which serves you well whichever platform you are using.

How Can WPC HR Help?

The SMS punishes disconnected systems: a pay change that never reaches the person with the login, a leaver reported late, a certificate assigned with the wrong SOC code. WPC HR's HR compliance software is built to keep your SMS entries and your HR reality in step. It holds each sponsored worker's certificate details alongside their contract, payroll and right to work evidence, tracks reporting deadlines and CoS validity with automated alerts, prompts offboarding reports so leavers are never left live, and surfaces mismatches on a single compliance dashboard. If you would rather have a specialist confirm where you stand, our Sponsor Licence Compliance Audit reviews your SMS records, user access and reporting history against current guidance and gives you a prioritised plan to close any gaps before an audit does.

📞 Call us: 020 8087 2343
📅 Book a free compliance audit: wpchr.co.uk/sponsor-licence-compliance-audit
🔗 See the platform: wpchr.co.uk/hr-compliance-software-features

Conclusion

The Sponsor Management System looks like administration, but every entry in it is a compliance statement to the Home Office. Assign a certificate, report a leaver, update an address, change a key contact, and each of those actions becomes part of the record that decides whether your licence is secure and your recruitment can continue. Treated carelessly, the SMS is where small errors quietly grow into findings. Treated well, it is proof that your organisation manages its immigration duties properly.

The sponsors who stay out of trouble share a few habits: they restrict access to trained people, keep the SMS in step with HR and payroll, report on time, read the message board, and audit themselves before the Home Office does. Build those habits into your everyday processes and the SMS stops being a source of risk and becomes a safeguard for your access to overseas talent. Where you want systems to carry the tracking and an expert eye on your records, WPC HR can help you run the SMS with confidence.

Glossary