Discontinuation of Network Credentials Login
As part of an ongoing review of security controls and authentication policies, the Department of Health and Human Services' Chief Information Security Officer (CISO) is requiring to discontinue the use of "network credentials" (also referred to as Active Directory (AD) username/password) for login and authentication into Access Management System (AMS). The use of AD credentials on a non-GFE computer could compromise a user's login to other HHS resources (i.e. VPN) should a malicious actor intercept the username and password.
PLEASE NOTE: The discontinuation of network credentials has no impact to users that login with an HSPD-12 access card/PIV card, external agency card, NIH login, and/or AMS username.
Effective 4/19/2021, the following changes will be implemented by AMS:
- Removal of the OpDiv dropdown selections from the "Network Credentials" tab on the AMS login page.
- For users that have logged in with network credentials within the past 60 days: Network login option from user account will be removed, AMS password will be reset, and an automated message with a new password will be sent to their email on record in AMS to provide an alternative option to login using AMS username/password if required.
- For users that have NOT logged in with network credentials within the past 60 days: Network login option will be removed.
AMS Login Frequently Asked Questions
What is changing?
Network Credentials will be no longer be a method of authentication in AMS. All OpDivs, with the exception of NIH, will be removed from the OpDiv drop-down list on the Network Credentials tab on the AMS Login page.
Will I be able to login with my Network Credentials after 4/19/2021?
You will not be able to use network credentials to authenticate into AMS. Please use your HSPD-12 access card or AMS credentials to authenticate into AMS.
I regularly use my HSPD-12 access card/PIV to log into AMS. Will this change affect me?
This change will not affect users that normally use their HSPD-12 access card to login. We encourage users to login with their HSPD-12 access card as their primary method.
I have never used AMS Credentials, how would I setup my AMS Credentials?
If you have not been issued AMS Credentials, you can setup your credentials by following the instructions listed in the following job-aid: How to Set Up and Log into AMS Using AMS Credentials.
Will I be able to login with my Network Credentials on AMS mobile?
Network Credentials will also be removed on AMS mobile. Similarly to the desktop site, all OpDivs, with the exception of NIH, will be removed from the OpDiv drop-down list on the Network Credentials page. You must login using PIV Derived or AMS Credentials when authenticating through AMS mobile.
For help with AMS Credentials, please contact ONE-DHHS (1-888-663-3447) 7:00AM - 9:00PM Eastern Time, Monday through Friday (except Federal holidays) or email AMSHelp@hhs.gov.