# Presentation: 178683

## USDA eAuthentication Service Security Responsibilities for End Users

**U.S. Department of Agriculture**
**eGovernment Program**

## Objective

**Objective**

- The security measures described herein define security requirements for the eAuthentication system.
- Non-compliance with the required security measures and behaviors outlined in this document could pose significant risk to the eAuthentication system and USDA applications.
- Compliance with this policy, as well as all other USDA security-related policies, is mandatory for all individuals using the eAuthentication system.

**The purpose of this document is to provide you with a comprehensive set of security responsibilities that you must adhere to in order to ensure proper use and protection of the eAuthentication system.**

## Contents

**Contents**

- USDA eAuthentication Service Background
- Proper Use of Your eAuthentication Account
- Protecting Access to the eAuthentication System
- Protecting Your Account’s Credentials
- Creating Secure Passwords
- Contact Information

## USDA eAuthentication Service Background

**USDA eAuthentication Service Background**

- The USDA eAuthentication Service provides the public and government businesses with a single sign-on capability for USDA applications, management of user credentials, and verification of identity.
- eAuthentication is a management and technical process that addresses user authentication and authorization prerequisites for providing services electronically. The system enables secure electronic transactions by providing an electronic identity validation to allow electronic signatures and non-repudiation.
- Through a voluntary online self-registration process, USDA customers and employees can obtain accounts as authorized users that will provide single sign-on capability to access USDA Web applications and services via the Internet.
- eAuthentication is developed and managed by the USDA Office of the Chief Information officer (OCIO).

**The ****USDA eAuthentication Service enables USDA customers to confidently share data and conduct official business transactions with USDA electronically via the Internet.**

## Proper Use of Your eAuthentication Account

**Proper Use of Your eAuthentication Account**

- eAuthentication accounts are provided for the purpose of accessing USDA Web applications. Misuse of an account will result in the termination of the account.
- Follow the instructions provided in the eAuthentication website to register for an eAuthentication account and to correctly use system features such as changing and resetting your password.
- A detailed description of the account registration process is provided in the Registration Job Aid, available in the FAQ section of the eAuthentication website. Adhere to the procedures outlined in this document to properly use your eAuthentication account.

**The provision of an eAuthentication account carries with it certain security responsibilities to ensure the protection and proper use of the eAuthentication system. **

## Protecting Access to the eAuthentication System

**Protecting Access to the eAuthentication System**

- Do not give unauthorized persons access to your account information.
- Do not use your account to give unauthorized persons access to USDA applications.
- Do not leave your computer for an extended period of time while you are still logged on with your eAuthentication account.
- Make sure you log out of applications and the eAuthentication system when you are not using your account.
- Abuse of access privileges will result in access removal and termination of your account.

**USDA eAuthentication accounts must be used appropriately to control access to the eAuthentication system and protect system data from unauthorized disclosure, modification, or deletion.**

## Protecting Your Account’s Credentials

**Protecting Your Account’s Credentials**

- Never write down or store passwords.
- Never share your password with anyone. Sharing your password allows unauthorized access to the eAuthentication system.
- Protect the entry of your password from unauthorized view.
- Change your password according to the guidelines established by NIST. You will be forced to change your password after 13 months.
- However, immediately change your password if you feel that it has been compromised.

**The user ID and password associated with an ****eAuthentication account ****are what enable users to access requested USDA resources. Therefore, it is imperative to protect your user ID and password to prevent unauthorized access.**

## Creating Secure Passwords

**Creating Secure Passwords**

**DO-NOTs**
- DO NOT use your user ID as your password.
- DO NOT use any word contained in a dictionary of any language. *** ***
- DO NOT use information that can be easily obtained about you such as birthdays, telephone numbers, and family names.
- DO NOT use keyboard patterns, or duplicating characters such as qwerty or aabbccdd.
- DO NOT reuse old passwords.

**DOs**
- DO use a password that contains at least one uppercase letter, one lowercase letter, and one non-alphanumeric character.
- DO use a seemingly random selection of characters.
- DO use a password that can be quickly typed without having to look at the keyboard.

**Use the following as a guideline for creating secure passwords. **

**Applying these techniques will create a more secure password that will require a prohibitively long time to break. **

## Thank You

**Thank You**

**Please contact the ****Information Technology Services (ITS)** **Service Desk if you are aware of any security vulnerabilities associated with the use of your eAuthentication account. ****This includes obtaining access to unauthorized information or applications, and all suspected or confirmed intrusion attempts such as hacker attacks. Contact the ITS Service Desk if you have questions about the information that was presented**
**email: **_[eAuthHelpDesk@usda.gov](mailto:eAuthHelpDesk@usda.gov)_** **
**telephone number: ****800-457-3642**