IRS to adopt Login.gov as user authentication tool
1–10 of 193 posts
Re: IRS to adopt Login.gov as user authentication tool
#2This is a good move. While it does consolidate logins to one single location that a bad actor can attack, the time and effort put into securing it is much better used as a pool and covered by a single entity than having each individual department (and often times teams within a department) creating and maintaining their own login methods.
Re: IRS to adopt Login.gov as user authentication tool
#3Is this the same authentication platform that TreasuryDirect uses?
edit - looks like no. On the one hand a single sign on to both would have been nice, OTOH TreasuryDirect's authentication system is a PITA.
Re: IRS to adopt Login.gov as user authentication tool
#4I'm glad they are adopting it. Login.gov was always kind of funny, like here use this to login to all US govt resources...except for this service, and this service, and all these services...
Re: IRS to adopt Login.gov as user authentication tool
#5login.gov is open source! They also encrypt user data in a way that they can't access it without the user's password, precluding the formation of a national registry that could be used towards nefarious and anti-democratic purposes. As a result, account recovery looks a lot like re-registration, which I think is a great thing.
https://github.com/18F/identity-idp
It's built on Rails, and I'm really impressed at the engineering decisions that were made here, from choice of technologies to level of transparency. I wish all public sector projects could exhibit the same leadership and competence demonstrated for login.gov--the interface is even a pleasure to use, which is hard to say for most government online services outside of the UK and parts of Canada in my experience. Bravo!
Re: IRS to adopt Login.gov as user authentication tool
#6love that Americans are always worried about some sort of national ID/database of citizens being used for nefarious needs
Re: IRS to adopt Login.gov as user authentication tool
#7It's amazing they weren't going to do this originally. What a fiasco.
Re: IRS to adopt Login.gov as user authentication tool
#8Is this the same authentication platform that TreasuryDirect uses? edit - looks like no. On the one hand a single sign on to both would have been nice, OTOH TreasuryDirect's authentication system is a PITA.
TD login is basically unusable in my view. I stopped using it simply because it was so painful.
Re: IRS to adopt Login.gov as user authentication tool
#9The VA still uses ID.me - so most veterans have an account anyway (I needed one to get a certificate of eligibility for a VA home loan). I had to add an authorization for the IRS on my ID.me to stop the child credit advance checks from coming last year (that should have never been an opt-out). I also had a few other govt systems I needed to access when I was a defense worker that used it.
So hopefully other agencies will move away from ID.me as well.
Re: IRS to adopt Login.gov as user authentication tool
#10love that Americans are always worried about some sort of national ID/database of citizens being used for nefarious needs
It's in our history to worry about it :')