Govforms supports seven authentication methods to match your service requirements.

•  Anonymous access for public-facing forms with no sign-in.
•  GOV.UK Notify magic link for passwordless email-based sign-in.
• OIDC/OAuth 2.0 for connecting to your existing identity provider such as Azure AD or any compliant provider.
•  AWS Cognito with hosted user pools and MFA.
• Configurable session timeouts with user warnings.
• Save-and-return in single-draft, multi-journey, or one-and-done modes.
•  Group-based sharing so users in the same group can view each other’s submissions.

Each method can be configured per service, and you can combine authentication with role-based read-only access for staff review scenarios.