December 11, 2020
NOT-OD-21-172 - Adjusted Timeline for Requiring Two-Factor Authentication to Access eRA Modules Using Login.Gov or InCommon Federated Accounts
NATIONAL INSTITUTES OF HEALTH (NIH)
Centers for Disease Control and Prevention (CDC)
U.S. Food and Drug Administration (FDA)
Agency for Healthcare Research and Quality (AHRQ)
Office of Research and Development (ORD), Department of Veterans Affairs (VA)
Substance Abuse and Mental Health Services Administration (SAMHSA)
Background
In April 2020, eRA launched the availability of login.gov for its external modules for optional use. Login.gov is a shared service authentication provider managed by General Services Administration (GSA). With one login.gov account, users can sign into multiple government agency systems while taking advantage of login.gov’s two-factor authentication capabilities that ensure the security of their personal information.
NIH/eRA and its partner agencies are now expanding the use of two-factor authentication via login.gov for all external user communities that access eRA’s external modules including Commons, Commons Mobile, Internet Assisted Review (IAR) and ASSIST. Beginning soon, NIH/eRA and its partner agencies will require all external users to only use login.gov to access eRA’s external modules including Commons, Commons Mobile, IAR and ASSIST.
Implementation
Initially, two-factor authentication requirements will be enforced for reviewers using the IAR module. Starting December 14, 2020, the new requirement will be phased in for reviewers, meeting by meeting, effective for review meetings February 1, 2021 and beyond.
By September 15, 2021, all external users will be required to use login.gov when logging into eRA systems. All users of eRA Commons, Commons Mobile and ASSIST are encouraged to begin the switchover now, before the mandatory deadline.
Note that when an external user is transitioned to required use of login.gov, the ability to use eRA credentials (username and password) or InCommon Federated credentials (where organizations authenticate their own users) will no longer be supported.
NIH is working with the InCommon Federation community to identify a solution that allows the InCommon Federation platform to support two-factor authentication requirements and continue its availability in the future.
At this time, users can only have one login.gov account associated with one eRA account. Users with multiple eRA accounts should review the FAQs for additional information.
Resources
See step-by-step instructions, FAQs, video tutorials and more at the Access eRA Modules via login.gov webpage.
Users with multiple eRA accounts should review the FAQ If I have more than one eRA account, can I use my login.gov account for all of those eRA accounts to log in to eRA?
eRA Service Desk
Submit a web ticket: https://grants.nih.gov/support/index.html
Toll-free:1-866-504-9552
Phone:301-402-7469