“The VA partnered with IDMe to ensure the security of the benefits and services available to veterans on VA.gov. The customization, robust reporting, and supporting materials provided by IDMe are unparalleled.ˮ
Authentication
Let your users sign in without starting over
Help more members access your services without repeating identity verification. Millions of people have already verified with IDMe and can use their existing account and MFA methods to sign in to yours.
100M+
Americans in the IDMe network
95M+
identities verified to NIST IAL2
75%+
are pre-verified sign-ins
Meet assurance requirements at sign-in
Set the authentication strength each interaction requires. IDMe supports NIST SP 800-63-3 AAL1 and AAL2 with phishing-resistant options, and prompts for step-up when your policy calls for it.
- Passkeys and security keys using FIDO2/WebAuthn
- IDMe Authenticator App with push and offline TOTP, including EPCS support
- Enhanced SMS, voice codes, and backup codes
Common step-up moments include account recovery, privileged access, sensitive transactions, authenticator changes, and suspicious sign-ins.
Protect accounts from takeover
IDMe evaluates device, network, credential, and behavioral signals at sign-in to detect likely takeover attempts and return a decision to your system.
When risk or account status changes, IDMe sends near-real-time notifications to your security systems. Reports and APIs help your team investigate and suspend at-risk accounts.
Connect to your existing identity stack
Connect IDMe to the systems that manage identity and access using OpenID Connect, SAML 2.0, or OAuth 2.0.
Integrations available for Amazon Cognito, Keycloak, Okta, and PingOne, with support for Microsoft Entra External ID configurations.
“IDMe showed us step by step exactly what the user experience would be, which is critical.ˮ
“By embedding IDMe into the request process, we are helping healthcare organizations confirm that records reach the right person while reducing unnecessary friction for patients.”
Frequently asked questions
What MFA and authentication methods do you support?
What MFA and authentication methods do you support?
IDMe supports passkeys, hardware security keys, authenticator-app codes and push notifications, SMS and phone codes, and backup codes. Authentication supports NIST SP 800-63-3 requirements at AAL1 and AAL2, including phishing-resistant options such as passkeys and security keys.
Do users have to re-verify their identity at every login?
Do users have to re-verify their identity at every login?
No. Routine sign-in uses the user's chosen MFA method. Additional identity verification is requested when your policy or a higher-risk transaction calls for it.
Do you apply risk-based step-up authentication?
Do you apply risk-based step-up authentication?
Yes. IDMe adds authentication steps when risk or your policy calls for higher assurance, rather than at every login.
How does IDMe help reduce account takeover?
How does IDMe help reduce account takeover?
IDMe helps reduce account takeover by combining MFA with device, network, credential, and behavioral risk signals, along with account recovery and lifecycle controls.
Make secure access easier for your users
Give users a simple way to sign in with verified identity and the right level of authentication for each interaction.