Disclaimer: The views expressed in this post are my own. They do not reflect the official position of the US Government or the Social Security Administration.
I recently heard a novel take on Gresham's Law that is worth sharing. "Public dollars in drives private dollars out." It's an interesting take on a problem we face in federal IT: Where the government reinvents capabilities to solve a public problem when a suitable commercial solution already exists. To illustrate, I will enter dangerous waters: Why
login.gov when
ID.me exists?
Identity, Credential, and Access Management (ICAM) is a tricky business. NIST has a guide about what is required and how to do it for those interested. The net, net of it boils down to one thing - proving a person is who they say they are so they can access digital services. It's a critical function, and doing it well protects individuals and organizations from many evils.
Here is the problem – two services that do the same thing.
ID.me, founded in 2010, provides Identity, Credential, and Access Management services.
Login.gov was launched in April 2017 by 18F and the US Digital Service.
Login.gov provides Identity, Credential, and Access Management services.
ID.me existed seven years before
login.gov.
What's worse? GSA contracted with
ID.me in 2014 to provide ICAM services for
Connect.gov. The
login.gov team (and 18f,) are a part of GSA.
You can't make this up.
Customers are finicky and like a choice. I see a need for more than one solution provider in the ICAM space. But, this is a space with other commercial providers: SheerID, Okta and GovX. With
login.gov, the government has used taxpayer dollars to create an overpriced competitor to existing commercial providers. The result validates my colleague's take on Gresham's Law.
18F and Digital services are needed. As I've stated before, the government blockers are tremendous. When
login.gov was considered, every agency said, "We are unique, and so are our digital apps."
But what was the government thinking when it decided to go down the
login.gov road? Could it do a better job than industry in this space? Are citizens more willing to submit their personal information to the government than a commercial entity [no, clearly not, e.g., The Privacy Act]? Could it sustain the investment over time? Wouldn't introducing a competing service have a chilling effect on commercial investment?
If a suitable solution exists in the private sector, the government should not try to reinvent the wheel. Let's spend our time, talent, and energy on the other things that matter.