skip to content

Who can use Toolkit?

Each institution included in Blue AD has access to a Toolkit Management Group pre-populated with members from their institution’s Lookup group.

The Toolkit Management groups are self-managing. Institutions can:

  • add/remove their own members. Members of the group gain full access to Toolkit for their institution including an ‘Administration’ tab.
  • add users via the Administration tab which will allow selective access.


How to access Toolkit

Log in to Toolkit via

Toolkit is Microsoft Single Sign-On authenticated so you may be prompted for multi-factor authentication (MFA) when you log in.


Select an institution to manage

Institution codes appear in coloured tiles within the blue bar at the top of the page. You will only see the institutions you are authorised to manage.

Choose a tile to select or deselect an institution. Selected institutions will have a tick next to them, those unselected will not.

Please note that all your available institutions will be selected when Toolkit is first loaded.


Navigate between sections

The navigation bar on the left-hand side of the page lists the sections you have access to.

Use the search box at the top of the navigation bar to search for objects such as an account, mailbox or room:

  • Type the object name into the search box and select enter to search. A new page will load with the results.
  • Filter the results by their object type, for example a team or shared mailbox


Timeout messages

A timeout message, ‘Attempting to reconnect to the server: # of 8’, will display if your browser has been sitting with Toolkit open for some time.

Press F5 or the browser refresh button to reload the web page and clear the message.


Error messages

When using Toolkit, you may see one or more of the following messages:

  • ‘This email address is not valid for your institution.’
    Email addresses can only be applied if Toolkit believes they are associated with the selected institution. If you find you are unable to set an email address, please contact the Service Desk. 
  • ‘This email address is not in a valid format’ or ‘The primary email address is not in a valid format’.
    The email address you entered is not in the form <localpart>@<domain>
  • ‘This email address has recently been used. Please try again in 30 minutes.’
    When an email address is removed or altered, the old value cannot be reused within 30 minutes due to synchronization delays between BlueAD and Azure.
  • ‘This email address is already in use elsewhere’, ‘The primary email address is already in use elsewhere’ or ‘An additional email address is already in use elsewhere’
    A different object in BlueAD already has this email address associated with it.
  • ‘This display name is already in use elsewhere.’
    Display names are visible in the Global Address List and therefore must be unique across all institutions.