# What authentication methods does Govform support?

Source: https://govform.com/resources/documentation/article/help-centre-what-authentication-methods-does-govforms-support
Topic: Architecture & integrations

**Govform gives you flexible access options, from an open public service to passwordless sign-in, organisational single sign-on and Cognito with multifactor authentication.**

You can match the sign-in experience to the audience and the information being collected. Library settings provide shared identity configuration, while individual services decide whether sign-in is needed and which provider to use.

## Choose the access model that fits

Open access plus three configurable sign-in providers
| Option | What it offers |
| --- | --- |
| Anonymous access | Let people use a public service without signing in when the journey does not require a verified identity. |
| Passwordless email | Verify an email address using a time-limited magic link, with a configurable email provider including GOV.UK Notify. |
| OpenID Connect | Connect an OAuth 2.0-based identity provider such as Microsoft Entra ID and use your organisation’s sign-in policies. |
| AWS Cognito | Use configured user pools, hosted sign-in, password policies and optional multifactor authentication. |

## Build a useful signed-in experience

-   **Set the right audience.** Restrict access by email domain or a defined list of email addresses.
-   **Protect the session.** Configure timeouts and warning messages so people know when they need to sign in again.
-   **Let people return.** Choose a single active draft, multiple journeys through a homepage, or a once-and-done service.
-   **Support authorised collaboration.** Group-sharing settings can allow members of the same group to see shared submissions.
-   **Connect users to their work.** A library-wide User portal can show eligible services, their own activity and authorised assignments.

Save-and-return, sharing and session controls complement authentication. QA and Production identity configuration can be tested and applied separately.

See [library authentication](<https://govform.com/resources/documentation/article/20-04-library-authentication-settings>) and [service access settings](<https://govform.com/resources/documentation/article/21-02-service-authentication-and-user-access>).