Identity and Access Management Services (IAM)

NIH Personal Identity Verification (or NIH PIV) cards, Restricted Local Access Badges, and Alternate Logon Token Cards act as official IDs and access keys for logging into NIH IT systems, such as the NIH network, NIH computers, and NIH applications.

The NIH Active Directory provides the infrastructure for NIH institutes and centers (ICs) to integrate with NIH systems. Services available through the NIH AD include single sign-on, location-independent access to resources, and Microsoft Windows management and security. We also provide supporting self-service portals for changing NIH account passwords or unlocking NIH accounts.

We provide NIH with a centralized identity authentication and authorization system. ICs can use IAM services to validate users to access applications, obtain authoritative information about users, and for public directory service and look-ups.

We also provide federation services that allow NIH staff to use PIV credentials to log into external sites and external collaborators to use external credentials to log into NIH web sites and applications.

CIT helps secure the NIH network by encrypting network communications and the identity of devices on the network through a ticket-granting service to authenticate to network resources; a secure proxy server for requests from client systems trying to connect to other NIH network resources; and a device public key structure that provides certificates to computers, websites, and code.