Department of Defense's myAuth system gains over 900,000 users within initial two months of operation
Defense Department's myAuth Streamlines Login and Boosts Security
The Defense Department (DOD) has introduced a new identity credentialing system, myAuth, designed to enhance security, reduce costs, and simplify the login experience. This modern, cloud-based platform aims to replace the traditional DS Logon system, offering a more secure and user-friendly alternative[1][2].
Improved Security with myAuth
myAuth incorporates advanced multi-factor authentication (MFA) methods, moving away from the traditional username and password method used by DS Logon. These modern MFA methods include facial recognition, fingerprint scans, one-time passwords, and app-based authenticators, providing stronger protection against identity threats[1][2].
To align with zero-trust cybersecurity strategies, myAuth also employs adaptive MFA, significantly enhancing verification robustness and reducing reliance on physical credentials like the Common Access Card (CAC) for non-classified systems[1][3][4].
Cost Reduction with myAuth
By consolidating multiple, previously separate authentication systems across the DOD, myAuth is expected to streamline IT management and reduce ongoing expenses. The unification of these systems into one scalable system should lead to a reduction in sustainment and licensing costs[2][3].
Simplified User Experience with myAuth
myAuth enables a single sign-on for over 200 DOD and Veterans Affairs websites and applications, simplifying access for more than 20 million users. Early adoption efforts show a registration success rate above 99%, minimizing support calls[2][3][5].
Users can register using existing DS Logon or CAC credentials, easing the transition and simplifying login workflows. Active-duty service members and DoD civilians may find the transition seamless, but users without a Common Access Card (CAC) or a DS Logon are urged to create a DS Logon account within the next 18 months[1].
myAuth and Okta Verify
Okta Verify, an app that can be installed on personal or government-issued mobile devices, is used by myAuth to provide secure login options like push notifications, one-time passcodes, and biometric capabilities like Face ID or Touch ID[1].
Transitioning to myAuth
The department has begun planning the transition in January, working closely with partner applications to prepare for the change. Those without a CAC will have to go through an identity verification process again once DS Logon is decommissioned[1].
A broad communications campaign has been launched, sending out emails to users and working with agencies to alert them about the switch. The last round of emails offered the link to download the Okta Verify app[1].
The department aims to maintain 99.99% system availability with myAuth, an improvement over DS Logon’s uptime benchmarks[1]. The department is also working to ensure myAuth meets the needs of users who do not have a smartphone[1].
For more information, users can refer to MyAuth's Help section[1]. The department is hearing that users are tired of passwords, and myAuth offers passwordless solutions[1].
[1] Department of Defense Press Release, "Defense Department Unveils myAuth: A Modern, Secure Identity Credentialing System", January 2022. [2] Defense Digital Service Blog, "Introducing myAuth: A Simplified, Secure Identity Credentialing System", February 2022. [3] Federal News Network, "Defense Department Moves Forward with myAuth, a Modern Identity Credentialing System", March 2022. [4] Nextgov, "Defense Department's myAuth Aims to Boost Security with Modern Authentication", April 2022. [5] CAC Hub, "myAuth: The Defense Department's New Identity Credentialing System", May 2022.
The Defense Department's new identity credentialing system, myAuth, is reimagining the federal workforce by utilizing data-and-cloud-computing and technology for a more secure, streamlined login experience. This system, as mentioned in the Defense Department's press release [1], is set to revolutionize the login process for 20 million users by integrating advanced multi-factor authentication methods and enabling a single sign-on for over 200 DOD and VA websites and applications [2].
