About

1. About ILogin
2. About ILogin Security
   
3. First Layer: ILogin Profile Verification
4. Second Layer: Multifactor Authentication
5. About Okta Verify
6. About Google Authentication
7. About SMS (Text) Authentication
8. Voice Call Authentication
9. Third Layer: Identity Verification Using Experian Verification Services
10. Existing Users: Sign In to ILogin
11. New Users: Create a New ILogin Account

About ILogin

ILogin provides one single, secure place with one sign in to access your frequently used State of Illinois program applications, also called apps.

Instead of going to different web sites for programs like unemployment, vaccination records, and healthcare, ILogin consolidates all those programs into one web site. It allows you to sign in once and see the ILogin dashboard—this is where the program applications (or apps) you participate in are located.

Many of the state programs are located in the ILogin dashboard, but not all. The Department of Innovation and Technology (DoIT) is currently working hard to bring more state program applications into ILogin.

About ILogin Security

ILogin uses the latest security tools to protect user data including profile authentication, identity verification, and multifactor authentication (MFA), reducing the chance that someone other than the account holder can access your data. In the background, ILogin employs fraud analytics and threat monitoring. ILogin offers these three layers of security.

Multifactor means "two or more factors." This second security layer is another method of authentication to verify that you're signing in with your user name and password and prevents anyone from using your data to access state programs and benefits.

By definition, multifactor authentication (MFA) is defined as:

• Knowledge: Something you know, typically a password.
• Possession: Something you have, such as a trusted device that's not easily duplicated, like a phone, hardware key, or security card.
• Biometric: Something physical, like a fingerprint or face scan.

During account setup, you set up at least two MFA methods in case one method isn't available.

First Layer: ILogin Profile Verification

This security layer verifies your user name (email) and password against the ILogin account information you enter during account setup.

For details on setting up an ILogin account, go to New Users: Create a New ILogin Account.

Second Layer: Multifactor Authentication

During ILogin account creation, you are required to set up this second layer of security. You set up two or more different methods choosing between Okta Verify, Google Authenticator, SMS (Text) Authentication, and Voice Call. These security methods meet the MFA definition of possession as previously described.

When signing in to use agency applications, you are prompted to verify yourself using an MFA method. After it successfully authenticates you, the ILogin dashboard displays state agency applications.

For details on setting up MFA, go to How To Guides: Set Up Multifactor Authentication.

For device requirements, go to FAQs: What devices do I need to create an ILogin account?

About Okta Verify

Okta is a third-party security company that saves your ILogin profile data and runs the ILogin sign in process. While ILogin is the Illinois state sign-in interface, Okta runs in the background and performs the profile and ID verifications.

During setup, you install the Okta Verify app on your mobile phone. In ILogin, you set up an account with an email. When ILogin displays a QR scan code, you use the app and your phone's camera to scan the code.

During sign in, the Okta Verify app authenticates you in one of these ways:

·      The Okta Verify app displays a code that you enter in ILogin.

·      The Okta Verify app sends a push notification to your mobile phone. You respond by tapping Yes, It's Me.

For short steps, go to How To Guides: Set Up Multifactor Authentication.

About Google Authentication

The Google Authenticator is a third-party app that allows you to enter a six-digit code from the Google Authenticator app into an ILogin page.

During setup, you install the Google Authenticator app on your mobile phone. In ILogin, you set up an account with an email. When ILogin displays a QR scan code, you use the app and your phone's camera to scan the code.

During sign in, the Google Authenticator app authenticates you by displaying a code that you enter in ILogin.:

For short steps, go to How To Guides: Set Up Google Authenticator.

About SMS (Text) Authentication

This option lets you to satisfy multifactor authentication without installing any applications on your devices. This methos lets you receive a text message on your mobile phone with a six-digit code. You enter this code in ILogin when prompted.

For short steps, go to How To Guides: Set Up SMS (Text) Authentication.

Voice Call Authentication

With Voice call authentication, ILogin calls you on either a landline or mobile phone to give you a six-digit code. You enter this code in ILogin when prompted. This option allows you to satisfy multifactor authentication without a smart phone.

This voice call option is a good choice to set up as a fall back in case you upgrade your mobile phone.

For short steps, go to How To Guides: Set Up Voice Call Authentication.

Third Layer: Identity Verification Using Experian Verification Services

Experian Verification Services (EVS) is a third-party service from Experian. The process consists of questions and answers based on your life history and transaction information aggregated from public and proprietary data sources. This security method meets the MFA definition of knowledge as previously described.

After selecting an agency app, you may or may not be asked to complete identity verification in EVS. This depends on which application you select on the ILogin dashboard. Application administrators determine whether this security level is required based on data sensitivity and confidentiality in that application.

This process does not affect your credit score. A credit freeze or a limited credit history do not prevent ID verification. However, a fraud alert may require alternate steps to verify you.

About Your ILogin Account

Existing Users: Sign In to ILogin

If you previously used any of these Illinois programs, do not create a new ILogin account:

·      Illinois Department of Employment Security (IDES) Unemployment Insurance services

·      Illinois Department of Healthcare & Family Services (HFS): Illinois Medicaid Program Advanced Cloud Technology (IMPACT) services

·      Illinois Department of Public Health (IDPH) Vax Verify site

Your username (email) and password is already in ILogin.

New Users: Create a New ILogin Account

If you are a first-time Illinois benefits user and don't have an ILogin account, then create your ILogin account using the steps on the How To Guides page under New Users: Create a New ILogin Account.

During first-time registration, your user name is your email account. Make sure you can access this email account to verify it. After your ILogin account is created, you can easily sign in to access Illinois state program apps.

For detailed steps, visit New Users: Create a New ILogin Account.

.