New policy coming soon: One IAL2 identity-verified account per user
As part of our ongoing work to align with NIST 800-63 Revision 4 standards, Login.gov will begin to enforce a policy where users may maintain only one identity-verified account at the IAL2 level across all IAL2 applications. Starting in early May 2026, users with duplicate IAL2 level identity-verified accounts will use a simple, self-service flow to delete one of their accounts. This flow has already successfully operated in production for several months with one of our largest partners with minimal user impact.
Note that when users delete one of their accounts, they might return to your app (including non-IAL2 applications) with a new UUID. If you rely on the user’s UUID to identify them, you should be prepared to handle this scenario. For more details on how to troubleshoot this error, you can request our instructional guide for “Handling users who come back with a new UUID.”
Questions about this policy can be addressed to our team at partners@login.gov.
Routine system maintenance planned for Thursday, April 30, 2026
Login.gov will undergo a routine database upgrade that will result in a brief period of system downtime on Thursday, April, 30, 2026 around 1:00 AM EDT. This should only take a few minutes and is part of our ongoing commitment to ensure Login.gov’s reliability and performance for our partners and their users.
New reporting and user management capabilities coming soon to the Partner Portal
We are pleased to share that we are preparing to release new features to our recently-launched partner portal with your priorities in mind. Pending final security reviews, the production partner portal will include data visualization capabilities, allowing you to generate reports directly within the portal. Additionally, we are actively working to improve the user management experience in both the production and sandbox portals to make it even more intuitive and user-friendly.
If you have not yet migrated and you are interested in switching to the new partner portal, please reach out to us at partners@login.gov.
Upcoming NIST Webinar: Mobile Driver's License (mDL) Adoption
NIST’s National Cybersecurity Center of Excellence (NCCoE) is hosting a public webinar on April 23rd from 1:00–2:00pm EDT to discuss the findings of their initial mDL demonstration project. This project specifically investigated the adoption of mDLs by banks and other financial institutions.
Login.gov is currently taking part in NCCoE's second mDL demonstration project. This ongoing effort is focused on evaluating the use of mDLs for identity verification within government services. Stay tuned for more information about Login.gov’s rollout of mDLs.
To learn more and register for the webinar, please visit the NIST website.
|
