Login.gov website screenshot

Login.gov

Login.gov is the U.S. federal government's secure single sign-on and identity verification service for the public, operated by the General Services Administration's Technology Transformation Services (GSA TTS). Relying parties — federal, and in some cases state and local — federate user authentication to Login.gov via OpenID Connect (iGov profile) or SAML 2.0, with support for IAL1 (auth-only) and IAL2 (identity-verified) assurance and AAL2 multi-factor authentication including phishing-resistant and PIV/CAC authenticators.

Login.gov publishes 7 APIs on the APIs.io network, including Authentication API, Authorization API, Discovery API, and 4 more. Tagged areas include Government, Federal, GSA, Identity, and Authentication.

The Login.gov catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

Login.gov’s developer surface includes authentication, developer portal, documentation, signup flow, getting-started guide, sandbox, engineering blog, and 16 more developer resources.

🌐 Visit website 📡 Source on GitHub
51.8/100 developing ▼ -5.4 Agent 31/100 agent aware Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFreemiumSelf serve⚡ Free to try
7 APIs 14 Features
GovernmentFederalGSAIdentityAuthenticationSSOOIDCSAMLIAL2AAL2

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 51.8/100 · developing
Contract Quality 17.8 / 25
Developer Ergonomics 9.6 / 20
Commercial Clarity 6.3 / 20
Operational Transparency 2.7 / 13
Governance 8.3 / 12
Discoverability 7.4 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/login-gov: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 7

Individual APIs this provider publishes, each with its own machine-readable definition.

Login.gov Authentication API

SAML SSO request endpoint.

Login.gov Authorization API

OAuth 2.0 authorization endpoint where the user authenticates.

Login.gov Discovery API

OIDC discovery and public key endpoints.

Login.gov Logout API

RP-initiated logout and session termination.

Login.gov Metadata API

SAML 2.0 IdP metadata.

Login.gov Token API

Token exchange using private_key_jwt or PKCE.

Login.gov UserInfo API

User attribute retrieval with a bearer access token.

Scroll for all 7

Open Collections 2

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Login.gov OpenID Connect API

OPEN COLLECTION

Login.gov SAML 2.0 API

OPEN COLLECTION

Pricing Plans 1

Published pricing tiers and plan structures.

Login Gov Plans Pricing

2 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Login Gov Rate Limits

0 limits

RATE LIMITS

Features 14

Notable capabilities this provider offers.

Single account for the public to access participating federal services
OpenID Connect (iGov profile) and SAML 2.0 federation
Authorization code flow with private_key_jwt or PKCE; implicit flow not supported
IAL1 (authentication only) and IAL2 (identity-verified) assurance levels
AAL2 with TOTP, SMS/voice, push, security keys, PIV/CAC, and platform passkeys
Phishing-resistant AAL2 variant and HSPD-12 (PIV/CAC) AAL2 variant
Identity proofing with optional facial-match step
Self-service Partner Portal (sandbox and production) for client registration and scope/cert management
JWKS endpoint with at-least-annual key rotation; SAML certs rotated yearly with year-versioned endpoints
{"User attributes scoped per OIDC scope/SAML attribute" => "email, all_emails, name, address, birthdate, phone, SSN, verified_at, locale, x509 subject/issuer/presented"}
{"Built and operated in the open" => "identity-idp (Ruby on Rails) and sample SP apps published under github.com/18F"}
English, Spanish, and French locales
Section 508 accessibility commitment; published privacy policy and PIA
Cost-recoverable funding model via Interagency Agreement (IAA); no public rate card

Scroll for all 14

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Login Gov Context

29 classes · 4 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

Login.gov API Rules

5 rules · 4 warnings 1 info

SPECTRAL

Login.gov API Rules

7 rules · 5 errors 2 warnings

SPECTRAL

JSON Schema 2

Standalone JSON Schema definitions for this provider's data models.

Login.gov ID Token Claims

11 properties

JSON SCHEMA

Login.gov UserInfo

19 properties

JSON SCHEMA

Examples 3

Example request and response payloads for these APIs.

Login Gov Token Exchange Example

2 fields

EXAMPLE

Login Gov Userinfo Ial1 Example

9 fields

EXAMPLE

Login Gov Userinfo Ial2 Example

16 fields

EXAMPLE

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Login Gov Authentication

http · 1 scheme

SECURITY

Login Gov Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Login Gov Vulnerability Disclosure

Hackerone · security.txt · contact published

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Login Gov Agentic Access

9 operations · 2 acting

9 operations · 2 acting

AGENTIC

Resources

Get Started 4

Portal, sign-up, and the first successful call

Portal
Portal
 Signup
Signup
 GettingStarted
GettingStarted
 Sandbox
Sandbox

Documentation 1

Reference material describing how the API behaves

Documentation
Documentation

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

Vocabulary
Vocabulary

Build 4

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization
 GitHubRepository
GitHubRepository
 GitHubRepository
GitHubRepository
 GitHubRepository
GitHubRepository

Access & Security 3

Authentication, authorization, and security posture

VulnerabilityDisclosure
VulnerabilityDisclosure
 DomainSecurity
DomainSecurity
 Authentication
Authentication

Operate 3

Status, limits, changes, and where to get help

StatusPage
StatusPage
 Contact
Contact
 RateLimits
RateLimits

Commercial 2

Pricing, plans, and the legal terms of use

Privacy
Privacy
 Plans
Plans

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Other 2

Properties that don't map to a standard resource type

BusinessInquiries
BusinessInquiries
 Accessibility
Accessibility

Source (apis.yml)

apis.yml Raw ↑ 
aid: login-gov
name: Login.gov
description: Login.gov is the U.S. federal government's secure single sign-on and identity verification service for the public,
  operated by the General Services Administration's Technology Transformation Services (GSA TTS). Relying parties — federal,
  and in some cases state and local — federate user authentication to Login.gov via OpenID Connect (iGov profile) or SAML
  2.0, with support for IAL1 (auth-only) and IAL2 (identity-verified) assurance and AAL2 multi-factor authentication including
  phishing-resistant and PIV/CAC authenticators.
type: Index
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
position: Consumer
access: 3rd-Party
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/login-gov.png
tags:
- Government
- Federal
- GSA
- Identity
- Authentication
- SSO
- OIDC
- SAML
- IAL2
- AAL2
created: '2026-05-25'
modified: '2026-05-25'
url: https://raw.githubusercontent.com/api-evangelist/login-gov/refs/heads/main/apis.yml
specificationVersion: '0.19'
apis:
- aid: login-gov:login-gov-authentication-api
  name: Login.gov Authentication API
  description: SAML SSO request endpoint.
  humanURL: https://developers.login.gov/oidc/
  baseURL: https://secure.login.gov
  tags:
  - Authentication
  properties:
  - type: OpenAPI
    url: openapi/login-gov-authentication-api-openapi.yml
  - type: Documentation
    url: https://developers.login.gov/oidc/
  - type: Documentation
    url: https://developers.login.gov/oidc/getting-started/
  - type: Documentation
    url: https://developers.login.gov/oidc/authorization/
  - type: Documentation
    url: https://developers.login.gov/oidc/token/
  - type: Documentation
    url: https://developers.login.gov/oidc/user-info/
  - type: Documentation
    url: https://developers.login.gov/oidc/logout/
  - type: Documentation
    url: https://developers.login.gov/oidc/certificates/
  - type: Signup
    url: https://portal.int.identitysandbox.gov
  - type: JSONSchema
    url: json-schema/login-gov-userinfo-schema.json
  - type: JSONSchema
    url: json-schema/login-gov-id-token-schema.json
  - type: JSONLD
    url: json-ld/login-gov-context.jsonld
  - type: SpectralRuleset
    url: rules/login-gov-rules.yml
  - type: Documentation
    url: https://developers.login.gov/saml/
  - type: Documentation
    url: https://developers.login.gov/saml/getting-started/
- aid: login-gov:login-gov-authorization-api
  name: Login.gov Authorization API
  description: OAuth 2.0 authorization endpoint where the user authenticates.
  humanURL: https://developers.login.gov/oidc/
  baseURL: https://secure.login.gov
  tags:
  - Authorization
  properties:
  - type: OpenAPI
    url: openapi/login-gov-authorization-api-openapi.yml
  - type: Documentation
    url: https://developers.login.gov/oidc/
  - type: Documentation
    url: https://developers.login.gov/oidc/getting-started/
  - type: Documentation
    url: https://developers.login.gov/oidc/authorization/
  - type: Documentation
    url: https://developers.login.gov/oidc/token/
  - type: Documentation
    url: https://developers.login.gov/oidc/user-info/
  - type: Documentation
    url: https://developers.login.gov/oidc/logout/
  - type: Documentation
    url: https://developers.login.gov/oidc/certificates/
  - type: Signup
    url: https://portal.int.identitysandbox.gov
  - type: JSONSchema
    url: json-schema/login-gov-userinfo-schema.json
  - type: JSONSchema
    url: json-schema/login-gov-id-token-schema.json
  - type: JSONLD
    url: json-ld/login-gov-context.jsonld
  - type: SpectralRuleset
    url: rules/login-gov-rules.yml
  - type: Documentation
    url: https://developers.login.gov/saml/
  - type: Documentation
    url: https://developers.login.gov/saml/getting-started/
- aid: login-gov:login-gov-discovery-api
  name: Login.gov Discovery API
  description: OIDC discovery and public key endpoints.
  humanURL: https://developers.login.gov/oidc/
  baseURL: https://secure.login.gov
  tags:
  - Discovery
  properties:
  - type: OpenAPI
    url: openapi/login-gov-discovery-api-openapi.yml
  - type: Documentation
    url: https://developers.login.gov/oidc/
  - type: Documentation
    url: https://developers.login.gov/oidc/getting-started/
  - type: Documentation
    url: https://developers.login.gov/oidc/authorization/
  - type: Documentation
    url: https://developers.login.gov/oidc/token/
  - type: Documentation
    url: https://developers.login.gov/oidc/user-info/
  - type: Documentation
    url: https://developers.login.gov/oidc/logout/
  - type: Documentation
    url: https://developers.login.gov/oidc/certificates/
  - type: Signup
    url: https://portal.int.identitysandbox.gov
  - type: JSONSchema
    url: json-schema/login-gov-userinfo-schema.json
  - type: JSONSchema
    url: json-schema/login-gov-id-token-schema.json
  - type: JSONLD
    url: json-ld/login-gov-context.jsonld
  - type: SpectralRuleset
    url: rules/login-gov-rules.yml
  - type: Documentation
    url: https://developers.login.gov/saml/
  - type: Documentation
    url: https://developers.login.gov/saml/getting-started/
- aid: login-gov:login-gov-logout-api
  name: Login.gov Logout API
  description: RP-initiated logout and session termination.
  humanURL: https://developers.login.gov/oidc/
  baseURL: https://secure.login.gov
  tags:
  - Logout
  properties:
  - type: OpenAPI
    url: openapi/login-gov-logout-api-openapi.yml
  - type: Documentation
    url: https://developers.login.gov/oidc/
  - type: Documentation
    url: https://developers.login.gov/oidc/getting-started/
  - type: Documentation
    url: https://developers.login.gov/oidc/authorization/
  - type: Documentation
    url: https://developers.login.gov/oidc/token/
  - type: Documentation
    url: https://developers.login.gov/oidc/user-info/
  - type: Documentation
    url: https://developers.login.gov/oidc/logout/
  - type: Documentation
    url: https://developers.login.gov/oidc/certificates/
  - type: Signup
    url: https://portal.int.identitysandbox.gov
  - type: JSONSchema
    url: json-schema/login-gov-userinfo-schema.json
  - type: JSONSchema
    url: json-schema/login-gov-id-token-schema.json
  - type: JSONLD
    url: json-ld/login-gov-context.jsonld
  - type: SpectralRuleset
    url: rules/login-gov-rules.yml
  - type: Documentation
    url: https://developers.login.gov/saml/
  - type: Documentation
    url: https://developers.login.gov/saml/getting-started/
- aid: login-gov:login-gov-metadata-api
  name: Login.gov Metadata API
  description: SAML 2.0 IdP metadata.
  humanURL: https://developers.login.gov/oidc/
  baseURL: https://secure.login.gov
  tags:
  - Metadata
  properties:
  - type: OpenAPI
    url: openapi/login-gov-metadata-api-openapi.yml
  - type: Documentation
    url: https://developers.login.gov/oidc/
  - type: Documentation
    url: https://developers.login.gov/oidc/getting-started/
  - type: Documentation
    url: https://developers.login.gov/oidc/authorization/
  - type: Documentation
    url: https://developers.login.gov/oidc/token/
  - type: Documentation
    url: https://developers.login.gov/oidc/user-info/
  - type: Documentation
    url: https://developers.login.gov/oidc/logout/
  - type: Documentation
    url: https://developers.login.gov/oidc/certificates/
  - type: Signup
    url: https://portal.int.identitysandbox.gov
  - type: JSONSchema
    url: json-schema/login-gov-userinfo-schema.json
  - type: JSONSchema
    url: json-schema/login-gov-id-token-schema.json
  - type: JSONLD
    url: json-ld/login-gov-context.jsonld
  - type: SpectralRuleset
    url: rules/login-gov-rules.yml
  - type: Documentation
    url: https://developers.login.gov/saml/
  - type: Documentation
    url: https://developers.login.gov/saml/getting-started/
- aid: login-gov:login-gov-token-api
  name: Login.gov Token API
  description: Token exchange using private_key_jwt or PKCE.
  humanURL: https://developers.login.gov/oidc/
  baseURL: https://secure.login.gov
  tags:
  - Token
  properties:
  - type: OpenAPI
    url: openapi/login-gov-token-api-openapi.yml
  - type: Documentation
    url: https://developers.login.gov/oidc/
  - type: Documentation
    url: https://developers.login.gov/oidc/getting-started/
  - type: Documentation
    url: https://developers.login.gov/oidc/authorization/
  - type: Documentation
    url: https://developers.login.gov/oidc/token/
  - type: Documentation
    url: https://developers.login.gov/oidc/user-info/
  - type: Documentation
    url: https://developers.login.gov/oidc/logout/
  - type: Documentation
    url: https://developers.login.gov/oidc/certificates/
  - type: Signup
    url: https://portal.int.identitysandbox.gov
  - type: JSONSchema
    url: json-schema/login-gov-userinfo-schema.json
  - type: JSONSchema
    url: json-schema/login-gov-id-token-schema.json
  - type: JSONLD
    url: json-ld/login-gov-context.jsonld
  - type: SpectralRuleset
    url: rules/login-gov-rules.yml
  - type: Documentation
    url: https://developers.login.gov/saml/
  - type: Documentation
    url: https://developers.login.gov/saml/getting-started/
- aid: login-gov:login-gov-userinfo-api
  name: Login.gov UserInfo API
  description: User attribute retrieval with a bearer access token.
  humanURL: https://developers.login.gov/oidc/
  baseURL: https://secure.login.gov
  tags:
  - UserInfo
  properties:
  - type: OpenAPI
    url: openapi/login-gov-userinfo-api-openapi.yml
  - type: Documentation
    url: https://developers.login.gov/oidc/
  - type: Documentation
    url: https://developers.login.gov/oidc/getting-started/
  - type: Documentation
    url: https://developers.login.gov/oidc/authorization/
  - type: Documentation
    url: https://developers.login.gov/oidc/token/
  - type: Documentation
    url: https://developers.login.gov/oidc/user-info/
  - type: Documentation
    url: https://developers.login.gov/oidc/logout/
  - type: Documentation
    url: https://developers.login.gov/oidc/certificates/
  - type: Signup
    url: https://portal.int.identitysandbox.gov
  - type: JSONSchema
    url: json-schema/login-gov-userinfo-schema.json
  - type: JSONSchema
    url: json-schema/login-gov-id-token-schema.json
  - type: JSONLD
    url: json-ld/login-gov-context.jsonld
  - type: SpectralRuleset
    url: rules/login-gov-rules.yml
  - type: Documentation
    url: https://developers.login.gov/saml/
  - type: Documentation
    url: https://developers.login.gov/saml/getting-started/
common:
- type: AgenticAccess
  url: agentic-access/login-gov-agentic-access.yml
- type: VulnerabilityDisclosure
  url: security/login-gov-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/login-gov-domain-security.yml
- type: Authentication
  url: authentication/login-gov-authentication.yml
- type: Website
  url: https://www.login.gov
- type: Portal
  url: https://www.login.gov/partners
- type: Documentation
  url: https://developers.login.gov
- type: Signup
  url: https://www.login.gov/partners/get-started/
- type: GettingStarted
  url: https://developers.login.gov/oidc/getting-started/
- type: Sandbox
  url: https://portal.int.identitysandbox.gov
- type: GitHubOrganization
  url: https://github.com/18F
- type: GitHubRepository
  name: identity-idp
  url: https://github.com/18F/identity-idp
- type: GitHubRepository
  name: identity-oidc-sinatra (sample relying party)
  url: https://github.com/18F/identity-oidc-sinatra
- type: GitHubRepository
  name: identity-saml-sinatra (sample relying party)
  url: https://github.com/18F/identity-saml-sinatra
- type: StatusPage
  url: https://status.login.gov
- type: Blog
  url: https://www.login.gov/about/news/
- type: Contact
  url: https://www.login.gov/contact/
- type: BusinessInquiries
  url: https://www.login.gov/partners/business-inquiries/
- type: Privacy
  url: https://www.login.gov/policy/
- type: Accessibility
  url: https://www.login.gov/accessibility/
- type: Plans
  url: plans/login-gov-plans-pricing.yml
- type: RateLimits
  url: rate-limits/login-gov-rate-limits.yml
- type: Vocabulary
  url: vocabulary/login-gov-vocabulary.yml
- type: Features
  data:
  - Single account for the public to access participating federal services
  - OpenID Connect (iGov profile) and SAML 2.0 federation
  - Authorization code flow with private_key_jwt or PKCE; implicit flow not supported
  - IAL1 (authentication only) and IAL2 (identity-verified) assurance levels
  - AAL2 with TOTP, SMS/voice, push, security keys, PIV/CAC, and platform passkeys
  - Phishing-resistant AAL2 variant and HSPD-12 (PIV/CAC) AAL2 variant
  - Identity proofing with optional facial-match step
  - Self-service Partner Portal (sandbox and production) for client registration and scope/cert management
  - JWKS endpoint with at-least-annual key rotation; SAML certs rotated yearly with year-versioned endpoints
  - User attributes scoped per OIDC scope/SAML attribute: email, all_emails, name, address, birthdate, phone, SSN, verified_at,
      locale, x509 subject/issuer/presented
  - Built and operated in the open: identity-idp (Ruby on Rails) and sample SP apps published under github.com/18F
  - English, Spanish, and French locales
  - Section 508 accessibility commitment; published privacy policy and PIA
  - Cost-recoverable funding model via Interagency Agreement (IAA); no public rate card
maintainers:
- FN: Kin Lane
  email: info@apievangelist.com
  X: apievangelist
  url: https://apievangelist.com