GSA Launches Face-Based Sign-In for Login.gov

The General Services Administration (GSA) has officially announced the general availability of facial recognition technology for Login.gov, its single sign-on service for accessing various federal services. Following a successful pilot, the agency has introduced this technology as a new identity verification option that meets the National Institute of Standards and Technology’s (NIST) 800-63-3 Identity Assurance Level 2 (IAL2) standard. The standard requires either remote or in-person identity proofing, and enables higher-assurance identity verification that helps federal agencies confirm the identities of individuals with a new level of accuracy and security.

Login.gov’s facial recognition technology is based on a one-to-one matching process, which involves users submitting a live selfie to be matched with a government-issued photo ID, such as a driver’s license. The images are solely used for identity verification purposes and are not repurposed for any other activities.

The rollout marks a significant step forward for GSA, following previous concerns about Login.gov’s compliance with identity assurance requirements. In March 2023, a report from the Inspector General’s office revealed that Login.gov had previously misrepresented its adherence to IAL2 standards, relying instead on third-party verification rather than biometric or physical comparisons.

Since acknowledging these shortcomings, the GSA has focused on improving its compliance and transparency, resulting in the current facial recognition option, which has now been independently certified as meeting NIST IAL2 standards. The technology underwent a pilot earlier this year to ensure a smooth user experience, with particular attention to potential user confusion and points where the verification process might stall.

According to Hanna Kim, Director of Login.gov, the addition of facial recognition technology came in response to requests from partner agencies with high-risk use cases, necessitating a strong identity verification method. By offering this IAL2-certified option, Login.gov aims to serve these agencies’ needs while maintaining its commitment to equity, privacy, and transparency. The agency is also collaborating with various partners to monitor for algorithmic bias and to ensure the technology is accessible across diverse user demographics.

Login.gov, which launched in 2017, now facilitates over 300 million sign-ins annually across more than 50 federal and state agencies. Users still have the option to verify their identity in person at U.S. Postal Service locations, which is especially beneficial for those who may not be able to complete the online process.

Sources: FedScoop, Federal News Network, TechRadar

–

October 10, 2024 – by the ID Tech Editorial Team