Beginning on August 28, 2023, Multifactor Authentication (MFA) will be required to login to IPP. Multi-factor authentication strengthens account security by requiring two factors to confirm user identity. To support MFA for non-PIV/CAC users, e.g., vendors, IPP is partnering with third-party credential service providers (CSPs) such as Login.gov or ID.me.
All vendor users will be required to verify their identity through a CSP before accessing IPP on or after August 28th.
IPP Vendor MFA Quick Reference Guide
MFA Vendor Troubleshooting Tips
Starting June 27th, we will host drop-in sessions for vendors at 2 PM ET to let them ask questions and learn about the MFA requirements. We ask that you attend one of these sessions if you have any questions.
ID.me, a certified commercial identity provider, provides secure identity verification services. Treasury partners with ID.me to make sure you are you – and not someone pretending to be you – when you request access to Treasury programs like IPP.
Login.gov, a trusted, government-issued sign-in service, offers secure and private online access to U.S. government programs,
such as federal benefits, services, and applications. With a Login.gov account, you can sign into multiple government websites with the same email address and password.
ID.me and Login.gov uses two-factor authentication, and stronger passwords, that meet new National Institute of Standards of Technology (NIST) requirements for secure identity validation and verification. By using a CSP such as ID.me or Login.gov, you will get an extra layer of security to help protect your IPP account against password compromises.
You will need the email address associated with your IPP account. You will also need to provide a valid mobile phone number or a landline without an extension.
Use your IPP account email address, so we can automatically link your IPP account to your ID.me or Login.gov account. If you use a different email address, we will not be able to link your account.
This process only works if the ID.me or Login.gov email address in the sign-in process is the same as your IPP account email address.
To access IPP, each individual user must have their own account. Group email addresses should not be used once MFA is enabled because account access is provided based on verification of your email address.
When creating an ID.me or Login.gov account, you will be required to confirm your email address. Confirming your email address certifies that you are the owner of the email address you provided. You will also be asked to set up multi-factor authentication to secure your account. After you set up MFA for your ID.me account, to sign in, you will enter your email address and password, and confirm your sign-in using the MFA method you choose. This will require you to have access to a smartphone, landline without extension, or a tablet.
We strongly recommend that you change the email address in your IPP account to an individual email address before August 28, 2023. To make the change, you will need to log into IPP and click the preferences link, then the user information link, and update the group or shared email address to an individual email address. Separate IPP user accounts must be created for any additional users that need access to your company's collector account.
You may use an existing account easily as long it is the same email address as your IPP account. Otherwise, if it is not the same (e.g., personal email versus work email) you will need to sign into your ID.me or Login.gov account and add your IPP account email address.
For ID.me, the primary email address in your existing ID.me account must match the email address in your IPP account. Please follow the instructions in “Changing your primary email address” to update the primary email address in your ID.me account.
For Login.gov, add a secondary email address following the instructions in part 1 of "Changing or adding (part 1 only) a login.gov email." Once your email address is verified, you can then sign into your Login.gov account using that new email and your existing password.
You may use an existing account easily as long it is the same email address as your IPP account. Otherwise, if it is not the same (e.g., personal email versus work email) you will need to sign into your ID.me or Login.gov account and add your IPP account email address. Please refer to “What if I already have an ID.me or Login.gov account?” to update your email address in your ID.me or Login.gov account. If you prefer, you can create a new ID.me or Login.gov account with your IPP account email address.
When you first create your ID.me or Login.gov account, you must use the same email address you currently use for signing in to IPP. This will then automatically link your IPP account information to your new ID.me or Login.gov account.
No, you cannot share an ID.me or Login.gov account and profile with another person or use a group email address to create a new account. Each user must create an ID.me or Login.gov account and go through an identity verification process to get access to IPP.
After August 28, 2023, you will not be able to use your old IPP username and password to sign-in to IPP. You will require an ID.me or Login.gov account to access IPP.
Yes, you may create an account with ID.me or Login.gov prior to the MFA implementation for IPP. However, you will not be able to sign-in to IPP using that account until August 28, 2023, when the necessary software upgrades to enable MFA will be deployed.