Please enable Javascript.


Vendor Multifactor Authentication (MFA)

Beginning on August 28, 2023, Multifactor Authentication (MFA) will be required to login to IPP. Multi-factor authentication strengthens account security by requiring two factors to confirm user identity. To support MFA for non-PIV/CAC users, e.g., vendors, IPP is partnering with third-party credential service providers (CSPs) such as Login.gov or ID.me. All vendor users will be required to verify their identity through a CSP before accessing IPP on or after August 28th.
 
IPP Vendor MFA Quick Reference Guide

MFA Vendor Troubleshooting Tips

Starting June 27th, we will host drop-in sessions for vendors at 2 PM ET to let them ask questions and learn about the MFA requirements. We ask that you attend one of these sessions if you have any questions.     

September 26 Drop-In Session


Frequently Asked Questions

1. What are ID.me and Login.gov?

ID.me, a certified commercial identity provider, provides secure identity verification services. Treasury partners with ID.me to make sure you are you – and not someone pretending to be you – when you request access to Treasury programs like IPP. 

Login.gov, a trusted, government-issued sign-in service, offers secure and private online access to U.S. government programs, 
such as federal benefits, services, and applications. With a Login.gov account, you can sign into multiple government websites with the same email address and password.

 


 
2. Why is the Invoice Processing Platform (IPP) using ID.me and Login.gov?

ID.me and Login.gov uses two-factor authentication, and stronger passwords, that meet new National Institute of Standards of Technology (NIST) requirements for secure identity validation and verification. By using a CSP such as ID.me or Login.gov, you will get an extra layer of security to help protect your IPP account against password compromises.

3. What will happen to my IPP account?
Nothing will happen to the information stored in your IPP account. You will keep all your data and still be able to accomplish everything you can do today.
Once you set up an ID.me or Login.gov account, we’ll link it back to your IPP account. You will continue to visit IPP.gov to access your account. The only difference is you will use your ID.me or Login.gov email address, password, and a one-time security code to sign into IPP.
 
4. What do I need to create an ID.me or Login.gov account?

You will need the email address associated with your IPP account. You will also need to provide a valid mobile phone number or a landline without an extension.  

5. What email address do I use to create an ID.me or Login.gov account?

Use your IPP account email address, so we can automatically link your IPP account to your ID.me or Login.gov account. If you use a different email address, we will not be able to link your account.


This process only works if the ID.me or Login.gov email address in the sign-in process is the same as your IPP account email address. 

6. I currently use a group email address in my IPP account. Will I be able to use a group email address once MFA is implemented?

To access IPP, each individual user must have their own account. Group email addresses should not be used once MFA is enabled because account access is provided based on verification of your email address.

When creating an ID.me or Login.gov account, you will be required to confirm your email address. Confirming your email address certifies that you are the owner of the email address you provided. You will also be asked to set up multi-factor authentication to secure your account. After you set up MFA for your ID.me account, to sign in, you will enter your email address and password, and confirm your sign-in using the MFA method you choose. This will require you to have access to a smartphone, landline without extension, or a tablet.

We strongly recommend that you change the email address in your IPP account to an individual email address before August 28, 2023. To make the change, you will need to log into IPP and click the preferences link, then the user information link, and update the group or shared email address to an individual email address. Separate IPP user accounts must be created for any additional users that need access to your company's collector account.

 
7. What if I already have an ID.me or Login.gov account?

You may use an existing account easily as long it is the same email address as your IPP account. Otherwise, if it is not the same (e.g., personal email versus work email) you will need to sign into your ID.me or Login.gov account and add your IPP account email address.

For ID.me, the primary email address in your existing ID.me account must match the email address in your IPP account. Please follow the instructions in “Changing your primary email address” to update the primary email address in your ID.me account.

For Login.gov, add a secondary email address following the instructions in part 1 of "Changing or adding (part 1 only) a login.gov email." Once your email address is verified, you can then sign into your Login.gov account using that new email and your existing password. 

8. I have an existing ID.me or Login.gov with my personal email address. Can I use the existing account, or should I register for a new one with my work email address, since I submit invoices on behalf of my company?

You may use an existing account easily as long it is the same email address as your IPP account. Otherwise, if it is not the same (e.g., personal email versus work email) you will need to sign into your ID.me or Login.gov account and add your IPP account email address. Please refer to “What if I already have an ID.me or Login.gov account?” to update your email address in your ID.me or Login.gov account. If you prefer, you can create a new ID.me or Login.gov account with your IPP account email address. 

9. Can I use a different email address from my IPP account email address, when setting up my ID.me or Login.gov account?

When you first create your ID.me or Login.gov account, you must use the same email address you currently use for signing in to IPP. This will then automatically link your IPP account information to your new ID.me or Login.gov account.

 
10. Can I share an ID.me or Login.gov account and profile with another person within my organization?

No, you cannot share an ID.me or Login.gov account and profile with another person or use a group email address to create a new account. Each user must create an ID.me or Login.gov account and go through an identity verification process to get access to IPP.

11. Can I use my old username and password to sign into IPP?

After August 28, 2023, you will not be able to use your old IPP username and password to sign-in to IPP. You will require an ID.me or Login.gov account to access IPP.

12. Can I create an account with ID.me prior to the MFA implementation for IPP?

Yes, you may create an account with ID.me or Login.gov prior to the MFA implementation for IPP. However, you will not be able to sign-in to IPP using that account until August 28, 2023, when the necessary software upgrades to enable MFA will be deployed.