Login.gov Account Migration from Cloud.gov

Overview

Cloud.gov is transitioning to Login.gov for improved security and user experience. This guide explains the migration process and your login options.

Login Options

Cloud.gov Platform supports three authentication methods:

1. Agency Single Sign-On (SSO) - Continue using your agency's existing SSO
2. Login.gov with PIV/CAC - New option using government-issued credentials
3. Traditional Cloud.gov login - Legacy option being phased out

Important: Traditional Cloud.gov login will be discontinued. Users without Agency SSO access should migrate to Login.gov.

Why Login.gov?

Benefits of Using Login.gov

• Faster authentication - Only your PIV/CAC PIN required
• No password management - Eliminates password expiration issues
• Enhanced security - PIV/CAC authentication is more secure than TOTP
• Automatic access control - Deactivated PIV/CAC cards automatically revoke platform access

Security Comparison

Feature	Cloud.gov Account	Login.gov
Authentication	Password + TOTP	PIV/CAC PIN
Password expiration	Yes	No
MFA method	TOTP (less secure)	PIV/CAC (more secure)
Automatic deprovisioning	No	Yes

How to Login with Login.gov

1. Navigate to the Cloud.gov login page
2. Select "Sign in with Login.gov"
3. Click "Sign in with your government employee ID"
4. Insert your PIV/CAC when prompted
5. Enter your PIN
6. You're authenticated! No additional passwords or codes needed

Account Migration Process

Automatic Migration

When you first log in with Login.gov using the same email address as your existing Cloud.gov account:

1. Your organization and space roles are automatically transferred
2. All permissions are preserved
3. The original Cloud.gov account is removed upon successful migration
4. You may need to log in again to refresh your authentication token

What Gets Migrated

• Organization roles
• Space roles
• Organization membership

Post-Migration Notes

• Your authentication token determines your organization and space access
• If you experience access issues immediately after migration, log out and log back in to refresh your token
• Contact your Organization Manager if you encounter any permission issues

Frequently Asked Questions

Q: How do I select which email address is used during my Login.gov sign in? A: Navigate to https://idp.int.identitysandbox.gov/account/connected_accounts and click Change in the CLOUD-GOV-OIDC section.

Q: Will I lose access to any resources during migration?
A: No, all your roles and permissions are preserved during the automatic migration.

Q: Can I still use my Cloud.gov account after migrating?
A: No, the original Cloud.gov account is removed after successful migration to prevent conflicts.

Q: What if I don't have a PIV/CAC?
A: Contact your Organization Manager to discuss alternative authentication options or Agency SSO availability.

Need Help?

If you encounter issues during migration or have questions about the process, please contact your the Cloud.gov support team at support@cloud.gov