Justification (JOFOC) IAW FAR 6.302-1: Login.gov Source Issuer Verification Solution

Login.gov enhances federal digital security by implementing robust authentication and identity proofing mechanisms, while proactively monitoring for potential identity theft to mitigate cyber risks. A key aspect of Login.gov’s authentication approach is utilizing a Source Issuer Verification service to electronically verify U.S. State-issued Driver’s License (DL) and Identity (ID) card data directly with the custodian of the record in real time at Login.gov’s request.

This results in a Government-provided “digital identity” for each user, established at National Institute of Standards and Technology (NIST) 800-63-3 (or its successors) Identity Assurance Levels (IAL) 1 or 2 and Authentication Assurance Level (AAL) 2. The resultant digital identity provides users the ability to sign in with a single set of credentials for all participating Government programs.

The Contractor must provide a Source Issuer Verification Solution that: Has the ability to electronically verify U.S. State-issued DL and ID card data directly with the custodian of the record in real time at Login.gov’s request. Has coverage of at least 75% of the U.S. population who have been issued a driver’s license, driver’s permit, or other state ID document. Will only verify personal information from Login.gov, it will not retain that PII nor use it for any commercial purposes.

Meets GSA IT Security Policies. The American Association of Motor Vehicle Administrators (AAMVA) is the only contractor available to perform the required services. This justification will be posted for a period of 30 days in accordance with FAR 6.305. Upon the post’s closing, and no other indication of capability amongst industry, an offer will only be solicited directly from AAMVA. The estimated cost is $22,578,137.11 for a 12-month base period, and four 12-month option periods. In accordance with FAR 52.217-8, TTS reserves the right to extend the service up to six months if continued service is required.