Skip to main content

EHBs KB for Grantees

Page tree

On this page

Overview

Why do I have to verify my identity?

Protects grantee information: Identity proofing ensures that only verified individuals can access sensitive award and application data, reducing the risk of identity theft or fraud.
Meets federal security requirements: HRSA must comply with federal cybersecurity mandates (NIST 800-63). This means we must verify users at a higher assurance level, and in turn, Grantees’ data is held to the same strong standards used across other federal systems.
Prevents disruptions: Once verified, grantees can securely access the EHBs with confidence that their accounts are protected, minimizing lockouts or issues caused by unauthorized attempts.
Streamlined one-time process: Identity proofing is only required once. After completing the process with Login.gov or ID.me, grantees will continue to use their identity-verified account for all future EHBs sign-ins.
Data Security: Both Login.gov and ID.me data collection is secure, encrypted and certified. SSNs, IDs, and selfies are collected and securely stored only by Login.gov or ID.me. HRSA or XMS.HRSA/EHBs only receive confirmation that the identity verification was successful. This ensures grantees’ sensitive data is not exposed to HRSA systems but is still verified under strict federal security standards.

General Requirements

Do I need all 3 items (Driver's License/Photo ID/Password, Social Security Number, and a selfie)?

Yes. All three are typically required to verify your identity at IAL2 level.

Do I need an existing EHBs account?

Yes. You must already have an EHBs account to link it to your Login.gov or ID.me account.

When was this level of verification required?

Since June 2017, per NIST 800-63-3 standards.

Address and Contact Info

Do I enter my work address or home address?

Use your home address—it must match public records used in the verification process.

How do I use personal vs. professional contact info?

Use your personal email for Login.gov/ID.me. Enter your professional contact info within EHBs where required.

Our program emails changed. Do we log in with the old one?

Yes. Log in using the email currently tied to your EHBs account, then update it in your settings.

Account Access and Recovery

When will the Personal Key be used?

It’s used to recover your account if you forget your password or lose access to your MFA device.

What if I forget my password and lose my personal key?

You’ll need to reverify your identity to regain access.

What if I already have an ID.me account?

You can use it only if the email matches your EHBs account.

Acceptable Documents

Can a passport card be used?

No. Use a passport book or state-issued ID instead.

Can I use a Global Entry or SENTRI card?

No. These are not accepted forms of ID.

Verification Process and Privacy

Does this process use AI to compare the selfie and the ID photo?

Possibly. CSPs may use facial recognition, but video call or in-person options are also available.

What protections are in place for personal data?

Both CSPs follow federal standards like NIST, FISMA, and encrypt all data.

Why do I need to agree to the Fair Credit Reporting Act (FCRA)?

To legally allow the CSP to check your credit file for identity verification (no impact on your credit score).

How can I confirm that my account is identity verified?

Login.gov

  • Login.gov does not display your “Identity verified” status on desktop. But if you log into your Login.gov account on a mobile device, your “Identity Verified” status will display under Account Details on your home page:

  

ID.me

  • After logging into ID.me, your "Verified Identity" status is available on the My Account dashboard under My IDs:

In-Person or Alternative Verification

Can I have a video call instead of submitting a selfie?

Yes.

Where are the in-person locations? What if I can't go?

Login.gov offers verification at select USPS offices.

If you can’t go in person, ID.me offers a video call option

Miscellaneous

Should I keep my glasses on for the selfie?

Yes, if you wore them in your ID photo but ensure there’s no glare and your eyes are visible.

Why is HRSA asking for personal identity if I represent a 501(c)(3)?

Federal standards require verifying individuals, not just organizational affiliation, for accountability and security.

Will this still be necessary with GrantSolutions?

Yes. Identity verification will still be required under federal standards.

Help Pages

The following help pages walk through creating a Login.gov or ID.me account, completing the identity verification process, logging into the EHBs, and frequently asked questions about the login process: