Identity Management

USPS picks vendor for cloud-based ID management hub

Cloud Computing

The federal government’s first major test of cloud-based identity management now has a vendor.

A contract to develop the Federal Cloud Credential Exchange (FCCX), a cloud-based hub that will allow people to use third-party credentials to efficiently and securely access multiple federal websites and services, went to Toronto-based SecureKey Technologies, FCW has learned.

Under the deal, USPS will enter into a firm fixed-price contract with SecureKey Technologies with a one-year value of $2.4 million. If two additional one-year options are exercised, the contract’s value could jump to as much as $15 million.

SecureKey Technologies will provide software configuration, hosting, help-desk services and third-party integration.

FCCX is an outgrowth of the White House’s National Strategy for Trusted Identities in Cyberspace, launched in 2011. NSTIC aims to create an identity ecosystem in which people can tap private or public identity providers for trusted third-party credentials that allow users to log into multiple government resources.

Most agencies have separate in-house identity management systems that require users to create different usernames and passwords for the agency sites and services they access. FCCX would streamline relationships between participating trusted identity providers and agencies by brokering externally issued digital credentials to grant people access to certain federal websites and services.

In-house ID management systems are a costly burden for agencies, according to USPS’ solicitation for the cloud hub earlier this year, and they create “a burden to the citizen to manage a username and password for each agency application they need to access.”

In an interview with FCW for a previous story, Naomi Lefkovitz, senior privacy policy adviser at the National Institute of Standards and Technology, said FCCX could help the federal government reduce costs through repetitive credentialing and alleviate username and password issues for citizens.

"Those are really the efficiencies -- and the good customer experience -- we are looking for," said Lefkovitz, who also co-led the FCCX Tiger Team that identified the cloud system's requirements and technical architecture.

That team, which consisted of USPS, the General Services Administration and NIST, began exploring the possibilities for FCCX last year, but it is unclear which agencies will be the first to try the system once it is developed.

About the Author

Frank Konkel is a former staff writer for FCW.

FCW in Print

In the latest issue: Looking back on three decades of big stories in federal IT.


  • Shutterstock image: looking for code.

    How DOD embraced bug bounties -- and how your agency can, too

    Hack the Pentagon proved to Defense Department officials that outside hackers can be assets, not adversaries.

  • Shutterstock image: cyber defense.

    Why PPD-41 is evolutionary, not revolutionary

    Government cybersecurity officials say the presidential policy directive codifies cyber incident response protocols but doesn't radically change what's been in practice in recent years.

  • Anne Rung -- Commerce Department Photo

    Exit interview with Anne Rung

    The government's departing top acquisition official said she leaves behind a solid foundation on which to build more effective and efficient federal IT.

  • Charles Phalen

    Administration appoints first head of NBIB

    The National Background Investigations Bureau announced the appointment of its first director as the agency prepares to take over processing government background checks.

  • Sen. James Lankford (R-Okla.)

    Senator: Rigid hiring process pushes millennials from federal work

    Sen. James Lankford (R-Okla.) said agencies are missing out on younger workers because of the government's rigidity, particularly its protracted hiring process.

  • FCW @ 30 GPS

    FCW @ 30

    Since 1987, FCW has covered it all -- the major contracts, the disruptive technologies, the picayune scandals and the many, many people who make federal IT function. Here's a look back at six of the most significant stories.

Reader comments

Thu, Aug 22, 2013

Really?! So we are outsourcing our nation's trusted identity credentialing services to a foreign-held company?! And who thought this was an acceptable solution for the American public? Time for some calls to our Congressmen!

Thu, Aug 22, 2013 earth

So the US government gave a contract to manage US citizens identifying information to a company that won’t be subject to US privacy laws and probably, given US citizens aren’t Canadian citizens, won’t have Canadian privacy law protections either. I think I’ll try to avoid using this till it is given to a company headquartered in the US and vote against any politician that doesn’t push for legislation requiring that. (Including requiring that this information can not be collected by the NSA, CIA…, which given that it will be crossing a US border now is fair game for them.) Our founding fathers wouldn’t recognize this government anymore.

Wed, Aug 21, 2013 Jerry Johnson

Some things should simply not be off shored. Fundamental cyber security controls is one of those things.

Wed, Aug 21, 2013

USPS release a paper on how they could be the trusted provider of digital identies to the US, kinda like they already do passport. Read their paper at

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above

More from 1105 Public Sector Media Group