What does HackerNews think of identity-idp?

Login.gov Core App: Identity Provider (IdP)

Language: Ruby

#4 in Rails
I'm skeptical of the number that Rettig quotes. I'd like to know where he got those numbers. Also, the code that runs Login.gov is (mostly) in the public domain: https://github.com/18F/identity-idp – anybody with a $2/mo VPS could run the code and do their own load testing.
login.gov is open source! They also encrypt user data in a way that they can't access it without the user's password, precluding the formation of a national registry that could be used towards nefarious and anti-democratic purposes. As a result, account recovery looks a lot like re-registration, which I think is a great thing.

https://github.com/18F/identity-idp

It's built on Rails, and I'm really impressed at the engineering decisions that were made here, from choice of technologies to level of transparency. I wish all public sector projects could exhibit the same leadership and competence demonstrated for login.gov--the interface is even a pleasure to use, which is hard to say for most government online services outside of the UK and parts of Canada in my experience. Bravo!

Login.gov | REMOTE or Washington, DC | DevOps/SRE/Software Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services. The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | DevOps/SRE/Software Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services. The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | DevOps/SRE/Software Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services. The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | DevOps/SRE/Software Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services. The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* (opening soon!) Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | DevOps/SRE/Software Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services. The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* (opening soon!) Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | DevOps/SRE/Software Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services. The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* (opening soon!) Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | DevOps/SRE/Software Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services. The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* (opening soon!) Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

* (opening soon!) Account Manager: https://join.tts.gsa.gov/join/login-account-manager/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | DevOps/SRE/Software Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services. The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* (opening soon!) Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

* (opening soon!) Account Manager: https://join.tts.gsa.gov/join/login-account-manager/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | Software Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services. The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* (opening soon!) Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/ * (opening soon!) Application Engineer: https://join.tts.gsa.gov/join/application-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Login.gov | REMOTE or Washington, DC | Software Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services. The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* (opening soon!) Application Engineer: https://join.tts.gsa.gov/join/application-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

This is the public SSO provider for the US Government. Interestingly, it supports U2F security keys and other forms of modern 2FA, and is open-source (released under the public domain of the United States).

It’s nice to see the government finally putting out a nice IT project.

Code here: https://github.com/18F/identity-idp

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services.

The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* (Re-opening soon!) Security Engineer: https://join.tts.gsa.gov/join/security-ops-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services.

The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* Ruby Software Engineer: https://join.tts.gsa.gov/join/application-engineer/

* Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

* Security Engineer: https://join.tts.gsa.gov/join/security-ops-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services.

The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entry point for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* Ruby Software Engineer: https://join.tts.gsa.gov/join/application-engineer/

* Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

* Security Engineer: https://join.tts.gsa.gov/join/security-ops-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application. View all of TTS' job postings here: https://join.tts.gsa.gov/

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services.

The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* Ruby Software Engineer: https://join.tts.gsa.gov/join/application-engineer/

* Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

* Security Engineer: https://join.tts.gsa.gov/join/security-ops-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services. The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* Ruby Software Engineer: https://join.tts.gsa.gov/join/application-engineer/

* Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

* Security Engineer: https://join.tts.gsa.gov/join/security-ops-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services.

The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* Ruby Software Engineer: https://join.tts.gsa.gov/join/application-engineer/

* Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

* Security Engineer: https://join.tts.gsa.gov/join/security-ops-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services.

The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* Ruby Software Engineer: https://join.tts.gsa.gov/join/application-engineer/

* Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

* Security Engineer: https://join.tts.gsa.gov/join/security-ops-engineer/

The above postings open on a revolving basis. If they're not open, just email us at [email protected] or [email protected], where we can answer questions and accept your application.

Feel free to reply on thread with any questions.

Login.gov | REMOTE or Washington, DC | Software Engineers, Site Reliability Engineers, Security Engineers | Full-Time | https://login.gov

Login.gov gives the public simple, secure access to multiple US government services through one verified account. We're working to fix online identity for US government services.

The Login.gov team operates like a startup within the government, working in the open as a distributed, agile team. The core product is open source, hosted in modern cloud infrastructure, and built for scale. Tens of millions of people have Login.gov accounts, and we aim to be the preferred entrypoint for all government digital services. Our users include people accessing benefits, applying for government jobs, serving in the military, and collecting funds awarded through grant programs.

Find us on Github: https://github.com/18F/identity-idp

The Login.gov project began as a collaboration between 18F and the U.S. Digital Service (USDS). Today it's part of the Technology Transformation Services (TTS). You'll join other software engineers delivering better public services through modern technology.

* Ruby Software Engineer: https://join.tts.gsa.gov/join/application-engineer/

* Site Reliability Engineer: https://join.tts.gsa.gov/join/devops-engineer/

* Security Engineer: https://join.tts.gsa.gov/join/security-ops-engineer/

If the above postings aren't open when you want to apply, email us at [email protected] or [email protected].

Feel free to reply on thread with any questions.

Whatever will replace SSNs will be a piece of technology. Ideally, something that uses public/private key encryption.

There's a lot of things that use public/private keys however, or security tokens, or whatnot. Should it be a smartphone app? A hardware dongle? Etc. etc. If a hardware dongle, which one?

As such, its the Executive Branch's job to research the various technologies, and implement a new standard to solve the online identity problem.

----------

For example, 18f (White House's crack website team) has the following: https://login.gov/

Github code here: https://github.com/18F/identity-idp

If single-sign on were widely deployed across US Agencies (and tied to financial services / private sector banks), we'd be in a way better place.

In any case, this is clearly the realm of the Executive Branch. Specifically 18f probably should continue to lead the effort, as they have been.

A total nit pick, but why do people have such a hard time consistently naming something as simple as a boolean variable? If we remember that naming is one of the hardest things in software engineering, why don't we put more thought into it?

From the documentation in the README: https://github.com/18F/identity-idp

  disable_email_sending: ‘true’
  enable_load_testing_mode: ‘true’
  telephony_disabled: ‘true’
Multiple directions, multiple naming conventions, strings?!?!?. Just seems like a recipe for failure. I feel like this would be more clear:

  load_testing_mode: true
  send_email: false
  telephony: false
When you write your conditionals, it makes it so much easier to read:

  if !disable_email_sending
     do_send_email
vs.

  if send_email
    do_send_email
Here is the line in actual use...

https://github.com/18F/identity-idp/blob/df549cf9a1fc2c21e3e...

I'd personally rather have the positive condition first as it is easier for me to follow logically in my head.