On August 31, 2026, the Office of Management and Budget directed federal agencies toward a universal sign on through Login.gov for most public services that require authentication. The goal is understandable. People should not have to prove the same identity repeatedly, remember a collection of passwords, or navigate different systems simply because public benefits and services are administered by different agencies.
But a single door is not meaningful access if millions of people cannot open it. Social workers should treat the new policy as a service delivery reform, not merely a technology project. The central question is whether a person can complete the process without losing benefits, privacy, dignity, or the right to an alternative channel.
One account could reduce real burdens
OMB Memorandum M 26 18 requires agencies to inventory authenticated public websites within sixty days. Agencies must then conduct digital identity risk management within 240 days. High Impact Service Providers have one year to deploy Login.gov for covered services or explain why they have not done so. Other covered public sites generally receive two years.
The policy can reduce repeated identity proofing, inconsistent security, and the confusion caused by many agency accounts. A person applying for retirement benefits, disaster assistance, student aid, or another federal service may benefit from a familiar login and a consistent recovery process. The government may also gain better fraud controls and lower support costs.
Those benefits are significant. They are not automatic.
Identity proofing can become an eligibility barrier
Many people served by social workers do not have a current driver license, a stable mailing address, a phone in their own name, reliable broadband, or easy access to identity documents. Some share devices. Others lose phones while moving between shelters or temporary homes. Survivors may have changed names or addresses. Older adults may struggle with cameras and document uploads. People with disabilities may encounter interfaces that satisfy a technical rule but remain difficult to use.
NIST’s current digital identity guidelines recognize these realities. They identify people experiencing homelessness, older adults, people with disabilities, people with limited device access, people without bank accounts, disaster survivors, victims of identity theft, and children as groups that may need an exception process or a trusted referee.
That is an important principle. A failed automated match does not establish that a person is fraudulent. It may show that government records are inconsistent, a document is inaccessible, or the system was designed around a life that the applicant does not have.
Social work has a practical role
Social service agencies should prepare now. Staff need a clear protocol for helping someone create an account without taking possession of passwords, authentication codes, or recovery credentials. Assistance should occur on a device the person controls whenever possible. Workers should explain what information is being collected and which agency will receive it.
Agencies also need a written boundary between support and impersonation. A worker can help a person understand instructions, obtain documents, reach an exception process, or contact technical support. A worker should not become the silent owner of the person’s account. Shared passwords create privacy risks, continuity problems, and possible allegations of unauthorized access.
Community organizations should map the alternatives for every major federal service they help people use. The OMB policy allows alternatives where a single digital method would impose a significant burden. Phone, paper, and in person options therefore remain essential. Social workers should document whenever an online failure forces a person into a slower channel or causes a missed deadline.
Measure completion, not enrollment
The most useful part of the OMB memorandum is its attention to performance. Agencies are told to monitor pass rates, abandonment, completion time, fraud, security, and privacy. Those measures should be published by service and by method, with careful attention to disability, language, age, housing instability, rural access, and other conditions that may affect completion.
A high number of created accounts is not success if people still cannot finish an application. A low fraud rate is not enough if the system rejects eligible applicants. Agencies should measure successful access to the underlying service, the time required to resolve identity problems, and whether an applicant could obtain human help.
Build redress into the front door
NIST calls for documented error handling, exception processes, and redress. That work must be visible at the moment a person fails. A vague error message and a generic support page do not constitute due process. People need a reason they can understand, an accessible way to challenge the result, a realistic time for response, and protection from benefit loss while the problem is reviewed.
Social workers should press agencies to test Login.gov with the people most likely to encounter barriers before migration becomes mandatory. They should also report patterns, not only solve cases one at a time. If one shelter sees repeated document failures, that is a system signal. If an aging services program sees widespread phone recovery problems, that is implementation evidence.
A universal sign on can make government simpler. It can also make exclusion more uniform. The difference will depend on whether agencies preserve alternatives, publish completion data, and treat redress as part of access. Social work should be present wherever that difference is decided.
Leave a Reply