View source for FPDS Multi-Factor Authentication Integration

From FPDS-NG

← FPDS Multi-Factor Authentication Integration
You do not have permission to edit this page, for the following reason:
The action you have requested is limited to users in the group: Users.
You can view and copy the source of this page.
__NOEDITSECTION__
==Schedule==
<TABLE  id="box-table-a" border=2>
<tr><th width=30% align="center"><b>Description</b></th><th width=34% align="center"><b>Start Date</b></th>
<th width=34% align="center"><b>End Date</b></th></tr>
<tr><td nowrap>BETA Implementation </td><td nowrap>November 6, 2020</td><td nowrap>November 6, 2020</td></tr>
<tr><td nowrap>Government Acceptance Testing </td><td nowrap>November 16, 2020</td><td nowrap>November 20, 2020</td></tr>
<tr><td nowrap>Production Deployment </td><td nowrap>December 5, 2020</td><td nowrap>December 5, 2020</td></tr>
</table>
==Document Changes==
<TABLE border=2 id="box-table-a">
<tr><th align="center"><b>Documentation</b></th><th align="center"><b>Changes Required</b></th></tr>
<tr><td nowrap>XML Specifications</td><td align="center">No</td></tr>
<tr><td nowrap>Web Services</td><td align="center">No</td></tr>
<tr><td nowrap>Data Dictionary</td><td align="center">No</td></tr>
<tr><td nowrap>NASA Specific Data Dictionary</td><td align="center">No</td></tr>
<tr><td nowrap>Use Case Summary</td><td align="center">No</td></tr>
<tr><td nowrap>Validation Rules</td><td align="center">No</td></tr>
<tr><td nowrap>Reporting</td><td align="center">No</td></tr>
<tr><td nowrap>ezSearch</td><td align="center">No</td></tr>
<tr><td nowrap>Atom Feeds</td><td align="center">Yes</td></tr>
<tr><td nowrap>User Manual</td><td align="center">Yes</td></tr>
<tr><td nowrap>Other Documentation</td><td align="center">Yes</td></tr>
</table>
==SPR Listing==
<TABLE id="box-table-a" border=2 style="width: 1080px">
<th width=18% align="center"><b>SPR #</b></th><th width=30% align="center"><b>Enhancement/Problem</b></th><th width=38% align="center"><b>Solution</b></th><th width=25% align="center"><b>Impact to Users and Integrators</b></th>
<tr>


<td style="width:95px" valign="center">
RTC-47762
</td>

<td>To improve the security of the FPDS user log-in process, FPDS has implemented Multi-Factor Authentication (MFA) through its integration with Login.gov. This was a requirement from GSA in order to gain approval for the Authority to Operate (OTA) for FPDS.
   
<td>Currently, FPDS as a system handles the authentication process for users to be able to access the system.
: • The existing authentication process is single factor, username/password authentication
: • The user session is tracked and maintained internally, logging the user out of the system automatically after 30 minutes of inactivity

With this release, FPDS will begin interfacing with Login.gov to enable multi-factor authentication (MFA) for user accounts
: • This change only impacts users who enter the system to input contract action information
: • This change does not impact existing system accounts 

Upon clicking the ‘Log In’ button on the FPDS home page, users will be taken to Login.gov authentication screens to complete the log-in process. Once the user has successfully logged in, and confirmed the second factor authentication, the user will be returned to FPDS to work within FPDS.

If the user has multiple existing FPDS account profiles, they will be provided a screen to select which account profile they would like to use for the established user session. New FPDS account profiles can be created by System Administrators.

As mentioned above, system accounts do not require MFA. Similarly, the authenticated DoD ATOM feeds will be exempt from requiring MFA.  

Authenticated ATOM feed access will transition to utilize system accounts for access starting on December 5, 2020. If your system utilizes the authenticated DoD ATOM feeds, please reach out to your CCB admin to begin the process of creating a system account. If you have any questions about the system account creation process, you can also reach out to the FPDS cmanage help desk at cmanage@us.ibm.com.

Public ATOM feeds will not be impacted.

<b>On 11/06/2020, beta FPDS users will <u>no longer be able to log into FPDS without having a Login.gov account for multi-factor authentication</u>

On 12/05/2020, production FPDS users will <u>no longer be able to log into FPDS without having a Login.gov account for multi-factor authentication</u>
</b>

For more information regarding Login.gov, please visit: 

: • Login.gov general help page
: https://login.gov/help/
: • How to create an account with Login.gov
: https://login.gov/help/creating-an-account/how-to-create-an-account/
: • An overview of the authentication method options that are available for users
: https://login.gov/help/authentication-methods/which-authentication-method-should-i-use/

</td>

<td align="center">No</td>

<tr>
Return to FPDS Multi-Factor Authentication Integration.
Retrieved from "https://fpds.gov/wiki/index.php/FPDS_Multi-Factor_Authentication_Integration"