{"id":"FR1718334757","name":"ID.me Identity Gateway","provider":"ID.me","providerSlug":"idme","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2021-06-10","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":[""],"assessor":"Fortreum, LLC","assessorId":"201664","smallBusiness":true,"website":"https://www.id.me/business/identity-gateway","description":"ID.me's Identity Gateway is a shared service for citizen and employee facing authentication and consists of a NIST 800-63-3 Identity Assurance Level 1 and 2 and Authenticator Assurance Level 1 and 2 as well as a NIST 800-63-2 Level of Assurance 1, 2, and 3 certified Credential Service Provider, a Credential Broker, and an Attribute Exchange. ID.me is the only citizen facing Credential Service Provider with a Supervised Remote capability that enables all users, including individuals without credit history and who live overseas, to reach Identity Assurance Level 2 without needing to visit a location in-person. ID.me is capable of immediately upgrading any government Identity Provider or login system to NIST IAL2/AAL2 within the look and feel of the agency’s brand.\n\nAn Intelligent Policy Engine provides a dynamic orchestration capability that enables agencies to configure adaptive Risk-Based Authentication and Attribute Based Access Control by policy. Once configured, the Intelligent Policy Engine dynamically routes users through Identity Proofing and Multi-Factor Authentication based on their demographic need and preference. ID.me’s Identity Gateway integrates directly with applications or with all Identity and Access Management platforms via open protocols like SAML 2.0, OAuth 2.0, and OpenID Connect. ID.me’s Credential Service Provider certification is available at (https://www.idmanagement.gov/trust-services/#consumer-identity-credentials) and the Kantara Initiative Trust Registry (https://kantarainitiative.org/trust-registry/). Kantara is a GSA approved Trust Framework Solution provider. To learn more about ID.me, visit https://www.id.me/business/identity-gateway.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/ID.me%20Logo.png","inMarketplace":true,"agencies":["22-011-05","22-022","22-027-05","22-027-01","22-036","22-032","22-028"],"reuseCount":6,"leverages":["F1206061353","AGENCYAMAZONEW","FR1812058188","F1206081364","F1607057910","F1512167750","FR1913470600","FR1821856903"],"leveragedBy":[],"timeline":[{"date":"2020-05-28","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2021-01-22","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2021-06-10","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Fortreum, LLC"},"sponsor":"22-036","trustCenterCheck":null}