Government Logon Service

The Government Logon Service (GLS) will provide the 'logon' component of a common authentication service for those people using government services over the Internet. The GLS will allow people to more conveniently access government online services by using the same logon - for instance, a username / password. A GLS logon will be able to be used with multiple agencies but because of the way the system is designed, the logon information will not be able to be shared between agencies. It will be like having a unique key that conveniently but privately, opens many government service doors. However, if they wish, people will still be able to use different keys for different services.

The Ministry of Economic Development (MED) is piloting a complete solution for managing logons (usernames and passwords) for people using the Internet to transact with government. Called the Government Logon Service (GLS), the project will also deliver a sustainable operating model for the service and a business case identifying the costs and benefits of rolling out the service across all-of-government.

Initially, the GLS will be deployed in up to four Government agencies; but, as a scalable solution, it can be rolled out to others. Aspects of the solution include developing and maintaining:

• software
• data population
• technical infrastructure
• physical infrastructure
• organisational change.

The full functionally of the GLS will be delivered in four increments from October 2005 through to the second quarter 2006.

Initial Implementation agencies

Agencies involved in the initial GLS implementation are:

• The Ministry of Economic Development is piloting the GLS for all authenticated online services provided by the Companies office.
• The Auckland City Council Executive has agreed in principle to use the GLS for a service that will allow ratepayers to view their rates information online. The project team has begun detailed analysis work with Auckland City Council.
• The State Services Commission will implement the GLS as the authentication method for a shared workspace holding information at the Security in the Government Sector (SIGS) security level of "Sensitive".
• A fourth agency has not been confirmed.

Project milestones: system build underway

The Programme has designed the draft GLS website to have the same look and feel as the government portal www.govt.nz so that it is perceived as an all-of-government service.

Milestones in the development include successful completion of:

• system build and testing for increment one. This involves developing sufficient functionality to provide GLS username/password services within the MED environment.
• external reviews of security, coding, and design for increment one functions
• the analysis phase for the second delivery increment, which adds online and offline GLS functions for users to maintain their usernames and passwords
• the design for the third delivery increment, which will implement the GLS 'look and feel' and establish the GLS as an independent service for use by other agencies.
• identification of the functionality for the fourth increment, which will make available a second authentication method involving more than one authentication factor.

Next steps: alignment, review, engage

Over the coming months, the GLS project team will:

• continue developing and implementing the remainder of the GLS functionality
• proceed with independent third-party reviews examining the application architecture, infrastructure architecture, and coding practice
• complete discussions with agencies to:
  • review and comment on operating and funding options for operationally managing the GLS
  • identify roll-out opportunities for further implementations of the GLS.
• implement a two-factor authentication method
• work with the Initial Implementation agencies to ready them for adoption of the GLS
• complete the GLS section of the business case.