What authentication methods does Govform support?
Govform gives you flexible access options, from an open public service to passwordless sign-in, organisational single sign-on and Cognito with multifactor authentication.
You can match the sign-in experience to the audience and the information being collected. Library settings provide shared identity configuration, while individual services decide whether sign-in is needed and which provider to use.
Choose the access model that fits
| Option | What it offers |
|---|---|
| Anonymous access | Let people use a public service without signing in when the journey does not require a verified identity. |
| Passwordless email | Verify an email address using a time-limited magic link, with a configurable email provider including GOV.UK Notify. |
| OpenID Connect | Connect an OAuth 2.0-based identity provider such as Microsoft Entra ID and use your organisation’s sign-in policies. |
| AWS Cognito | Use configured user pools, hosted sign-in, password policies and optional multifactor authentication. |
Build a useful signed-in experience
- Set the right audience. Restrict access by email domain or a defined list of email addresses.
- Protect the session. Configure timeouts and warning messages so people know when they need to sign in again.
- Let people return. Choose a single active draft, multiple journeys through a homepage, or a once-and-done service.
- Support authorised collaboration. Group-sharing settings can allow members of the same group to see shared submissions.
- Connect users to their work. A library-wide User portal can show eligible services, their own activity and authorised assignments.
Save-and-return, sharing and session controls complement authentication. QA and Production identity configuration can be tested and applied separately.