Researcher Auth Service (RAS)

BRICS Log in is switching to Researcher Auth Service (RAS)

The traditional username/password login flow for BRICS has been replaced by NIH’s Researcher Auth Service (RAS). This change will require all users to follow a set of steps to log in/sign up for RAS and link your BRICS account to your RAS account. RAS supports these identity providers: NIH PIV/CAC, VA PIV, DOD CAC cards. Login.gov account with assurance level 2 or an ID.me account with assurance level 2.

Users with an NIH/HHS/DOD account should use their NIH PIV/CAC, VA PIV, DOD CAC cards as the identity provider when logging in with RAS.

Users based in the US and without one of the cards listed above will need to use Login.gov with identity assurance level 2. If the user does not already have a Login.gov account, they will need to create one and then select Login.gov as the identity provider when logging in with RAS. Then verify for identity assurance level 2 before they will be able to use their BRICS instance.

International users will need to use an ID.me account with identity assurance level 2. If the user does not already have an account, they will need to create one and select it when logging in with RAS. Then verify for identity assurance level 2 before they will be able to use their BRICS instance.

Click here to learn more about Researcher Auth Service (RAS)


Users can log into their BRICS system by using one of the following login methods:

  1. Using their PIV/Smart card which includes NIH PIV/CAC, VA PIV, DOD CAC cards.
  2. Using Login.gov
  3. Using ID.me

NOTE: Users signing in with login.gov or ID.me will be required to get Identity Assurance Level 2 (IAL2). This guide will show the necessary steps.

Collapse All   Expand All

Logging in with PIV/Smart Cards

Logging in with PIV/Smart Cards

For current users with a NIH PIV/CAC card, please follow these steps:

1. Navigate to your BRICS instance and select Log in.

2. Here you will see the new Log in page. Should you have a NIH PIV/CAC card, it is preferred to Log in with it. Click the “Log In” button and continue to the next step.

If you do not have a PIV card you will need to follow the steps in Existing user Log in with Login.gov

NOTE: BRICS will no longer be handling your Log in credentials. For assistance with your account credentials follow steps:

Log in to your account image

3. After clicking with “Log In” you will be taken to the following page. Select PIV/Smart Card.

  • a. If you are unable to sign in with your PIV card, then you may sign in using the Authenticator App instead.

Log in to your account piv card button image

 

4. Provide your NIH PIV/CAC card authentication by selecting the appropriate certificate and provide your PIN:

An image of screen to select certification

5. If you are a new user, please proceed here to create your BRICS account.
If you are an old user that use to use the traditional email/password login and has not signed in with RAS, please proceed to link your account with RAS.

Logging in with Login.gov

Logging in with Login.gov

1. Navigate to your BRICS instance and select Log in.

2. Here you will see the new Login page. If you have a NIH PIV/CAC card isrecommended to Log in with it by following steps in Existing user Log in with a NIH PIV/CAC card.

If you do not havea Login.gov account select the “create a Login.gov account” link under the loginbutton. Otherwise skip to logging into RAS at step 4.

NOTE: BRICS will no longer be handling your Log in credentials. Forassistance with your account credentials follow steps:

  1. Forgot NIH PIV credentials: https://auth.nih.gov/CertAuthV3/forms/mfa/Help.html
  2. Forgot Login.gov password: https://secure.login.gov/users/password/new
  3. Forgot ID.me password: https://help.id.me/hc/en-us

A screenshot of a log in page for BRICS. (Rectangle)

3. Create your Login.gov account with your desired email. Afterwards checkyour email to verify and finish creating your Login.gov account.

A screenshot of a log in page for BRICS. (Rectangle) A screenshot of a log in page for BRICS. (Rectangle)

4. After creating and verifying your Login.gov account, navigate back toyour BRICS instance Log in page and select “Log In”.

A screenshot of a log in page for BRICS. (Rectangle)

5. Select “Login.gov

RAS Login page with Login.gov selected (Rectangle)

6. Enter your Login.gov credentials and select Sign In:

A screenshot of a login form for Login.gov. (Rectangle)

7. After logging in, users that have not verified their identities forLogin.gov may be prompted too. Please follow the steps at section Login.gov - Identity Assurance Level 2 (IAL2)

8. After verifying identity for IAL2, when users first authenticatethrough Login.gov, they will need to grant permission to BRICS to have accessto their basic profile information.

Screenshot of consent to share from users RAS account to BRICS. (Rectangle)

9. If you are a new user, please proceed here to create your BRICS account.

If you are an olduser that use to use the traditional email/password login and has not signed inwith RAS, please proceed to link your account with RAS.

Logging in with ID.me

Logging in with ID.me

1. Navigate to your BRICS instance and select Log in.

2. Here you will see the new Log in page. If you have a NIH PIV/CAC card is recommended to Log in with it by following steps in Existing user Log in with a NIH PIV/CAC card.

ID.me accounts can be used for international users allowing users outside of the US to still get access to BRICS.

If you do not have a ID.me account select the “create a ID.me account” link under the login button. Otherwise skip to step 4.

  1. Forgot NIH PIV credentials: https://auth.nih.gov/CertAuthV3/forms/mfa/Help.html
  2. Forgot Login.gov password: https://secure.login.gov/users/password/new
  3. Forgot ID.me password: https://help.id.me/hc/en-us

RAS login page with ID.me selected (Rectangle)

3. Enter account details and click create account. User will need to then verify their email.

RAS login page with ID.me selected (Rectangle)

4. After creating your account navigate back and log into BRICS using RASand select ID.me

RAS login page with ID.me selected (Rectangle)

5. After creating the ID.me account and signing into it through BRICS. Users that have not verified their identities for ID.me may be prompted to verify their identities: Please follow the steps at section ID.me -Identity Assurance Level 2 (IAL2)

6. After verifying identity for IAL2, when users first authenticate through ID.me, they will need to grant permission to BRICS to have access to their basic profile information.

Screenshot of consent to share from users RAS account to BRICS. (Rectangle)

7. If you are a new user, please proceed here to create your BRICS account.

If you are an old user that use to use the traditional email/password login and has not signed in with RAS, please proceed to link your account with RAS.

Linking RAS and BRICS account

Linking RAS and BRICS account

This section is only for users who had a BRICS account with a traditional email/password login and never linked their RAS account with their BRICS account.

1. After logging in via RAS: If you have an account continue by selecting “Search for Existing Account”.

Screen that shows the first time a user logs into BRICS via RAS with the Link an Account chevron page. (Rectangle)

2. Enter your email/username of your BRICS account you wish to link:

Screen that shows the first time a user logs into BRICS via RAS with the Link an Account chevron page. (Rectangle)

3. Verify your account by going to the email account associated to your BRICS account and clicking the verify account ownership link.

If you do not see your email, please do the following:

  1. Wait for the email to be received.
  2. Check your spam folder for the email.
  3. Resend the verification email using the “Resend Verification Email” button.
  4. Ensure you have entered your email/username correctly in step 6.
  5. Contact your operations team for any additional help.

Screen that shows the link existing user account for first time user logging into BRICS via RAS with the Link an Account chevron page. (Rectangle)

4. Congratulations! Your account should now be successfully linked, and you can continue to your BRICS workspace.

<Screen that shows the linking successful page after a user logs into BRICS via RAS with the Link an Account chevron page. (Rectangle)

5. You may be redirected to the E-signature page if you have not submitted your e-signature before. NOTE: Submission of your E-Signature is required to access your BRICS instance.

A screenshot of the electronic signature that is required to use BRICS. Has indicators of the users name they will need to fill out before accepting terms and submitting. (Rectangle)

Request BRICS Account

Request BRICS Account

For new users that do not have an account on the BRICS instance yet follow these steps:

1. After logging in via RAS. Select the “Create Account” button to create a new account.

The create an account page to request an account. (Rectangle)

2. The account management page will load where you will need to upload supporting documentation for your BRICS account. After an account request you will need to wait until your account is approved to get access to the BRICS instance. Users will have access to the account management module before approval and may log back in to upload additional supporting documentation at any time. 

The account management page to request an account. (Rectangle)

3. On your first Log in to your BRICS instance, you will be prompted with an E-signature page.  NOTE: Submission of your E-Signature is required to access your BRICS instance.

A screenshot of the electronic signature that is required to use BRICS. Has indicators of the users name they will need to fill out before accepting terms and submitting. (Rectangle)

Login.gov - Identity Assurance Level 2 (IAL2)

Login.gov - Identity Assurance Level 2 (IAL2)

BRICS instances now require additional identity proofing so login.gov accounts will need identity assurance level 2.

When user's login to a BRICS instance via Login.gov, they will be prompted to verify their identity with the following requirements:

  1. Your State-Issued ID. You can upload a photo by phone or by computer.
  2. A phone or computer with a camera to take a photo of yourself (not always required).
  3. Social Security Number.
  4. A phone number on a phone plan that is in your name.

    i. NOTE: If you do not have a phone plan that isin your name, we can send you the verification code by mail which takes approximately 3-5 days.

Login.gov IAL2 requirements

Read the following page and accept by clickingthe box to grant permissions and click continue.

Confirmation to start IAL2 verification.

Verifying state-issued ID

Verifying state-issued ID

Users are required to upload their state issueID. Users can upload a photo of their state issued ID on either their phone orby uploading the photo from their computer (a front and back photo are required). Users uploading by their phone can follow these steps:

1. Click Use your phone

Verify your identity step for IAL2 verification. (Rectangle)

2. Enter the phone number of the phone you wish to use.

Verify your identity step for IAL2 verification. (Rectangle)

3. You will get a confirmation message, do not close the confirmation page, that a link has been sent to your phone to upload the photos. Open the message on your phone and follow the link in the message.

Verify your identity step for IAL2 verification. (Rectangle)

a. [Mobile screenshot 1/4]: Click Take photo for both the front/back of the ID or upload a photo of the font/back.

Verify your identity step for IAL2 verification. (Rectangle)

Verify your identity step for IAL2 verification. (Rectangle)

b. [Mobile Screenshot 3/4] Do not close this page. The images are being verified and will automatically load the next step after it has processed.

Verify your identity step for IAL2 verification. (Rectangle)

c. [Mobile screenshot 4/4] Your state issue ID has been verified. Switch back to your computer to continue the verification process.

Verify your identity step for IAL2 verification. (Rectangle)

Verifying personal details

Verifying personal details

After verifying the state issue ID, the next page will load to verify the user's personal details.

1. Enter your social security number and click continue.

Verify your identity step for IAL2 verification. (Rectangle)

2. A page showing your personal details will display. Verify your information and click continue.  

Verify your identity step for IAL2 verification. (Rectangle)

Verifying phone or address

Verifying phone or address

1. The user is required to enter a phone number that has them on the plan. If the user does not have a phone number that their name is associated with then they can click, Verify your address by mail Instead. Otherwise, please enter your phone number and click continue.

Verify your identity step for IAL2 verification. (Rectangle)

Secure your account

Secure your account

1. User will be prompted to enter their login.gov password to save their verified information.

Verify your identity step for IAL2 verification. (Rectangle)

2. One the next screen you will get a personal key. This personal key should be saved and kept somewhere safe. It will be needed if the user needs to reset their password. If the user does not have their personal key when resetting their password, they will have to verify their information again. 

Users will need this personal key on the next step.

Verify your identity step for IAL2 verification. (Rectangle)

3. Enter your personal key.

Verify your identity step for IAL2 verification. (Rectangle)

4. Click Agree and continue - this is the last step ofthe verification process.

Verify your identity step for IAL2 verification. (Rectangle)

ID.me - Identity Assurance Level 2

ID.me - Identity Assurance Level 2

BRICS instances now require additional identity proofing so ID.me accounts will need identity assurance level

When user's login to a BRICS instance viaID.me, they will be prompted to verify their identity with the following requirements:

  1. One of the following: Driver's license, State ID, Passport, Passport card
  2. Mobile phone to upload the documents and to provide a selfie with.

4.1 Verifying identification document

1. Click either Self-Service or Video Call to verify your documentation. In this guide we will be selecting Self-Service.

Verify your identity step for IAL2 verification. (Rectangle)

2. Users will need to consent for ID.me to collect personal data.

Verify your identity step for IAL2 verification. (Rectangle)

3. Choose the identification document that will be uploaded and enter a phone number to receive a link to upload the relevant document(s).

Verify your identity step for IAL2 verification. (Rectangle)

4. [Mobile image 1/7] Check the messages on the phone that was entered in the previous step and open the link received.

Verify your identity step for IAL2 verification. (Rectangle)

5. [Mobile image 2/7] Verify your email address

Verify your identity step for IAL2 verification. (Rectangle)

6. [Mobile image 3/7] Select start document upload

Verify your identity step for IAL2 verification. (Rectangle)

7. [Mobile image 4/7] Follow through the steps to take photos of both the front and back. Then fill in the contact details and submit.

Verify your identity step for IAL2 verification. (Rectangle)

8. [Mobile image 5/7] There will be a short processing screen.

Verify your identity step for IAL2 verification. (Rectangle)

9. [Mobile image 6/7] If the document was unable to be verified automatically, users will be taken to enter in all of their information for manual verification.

Verify your identity step for IAL2 verification. (Rectangle)

10. [Mobile image 7/7] After entering all the relevant information press continue.

Verify your identity step for IAL2 verification. (Rectangle)

11. Once the details have been entered and has been successfully reviewed and verification is complete then the user's account is now IAL2 and will be able to access their BRICS instance.

Other Changes

Other Changes

5.1 Logging out of your BRICS account and/or your RAS account.

1. When logged into your BRICS account, you will see a logout dropdown at the top left beside your username.

Verify your identity step for IAL2 verification. (Rectangle)

2. Should you wish to stay logged into other applications using RAS you may choose to only log out of your BRICS instance. If you wish to logout of allRAS applications you are currently signed into, select Log out of [Your BRICS Instance] & RAS.

Verify your identity step for IAL2 verification. (Rectangle)

API token

API token

The API token serves as your identity and access control to the entire system. This token is like a password and should be protected as such. The token updates every ~30 minutes minimum, on every login, and every session update.

Previously the API token was retrieved by making a request to /auth/login with the user's username/password. However, this has now changed:

For users to retrieve/refresh the API token, they will need to log into BRICS and navigate to the Account Management module.The “My Profile” page will load, and then select the `API tokens` tab and your token is accessible there.

Account management module showing where to retrieve API token. (Rectangle)

Contacts and Links

1. Help with RAS log in credential issues:

  1. Link to Login.gov password recovery: https://secure.login.gov/users/password/new
  2. Link for NIH PIV card issues: https://auth.nih.gov/CertAuthV3/forms/mfa/Help.html
  3. Link for ID.me issues: https://help.id.me/hc/en-us

2. General Information on NIH Researcher Auth Service: https://datascience.nih.gov/researcher-auth-service-initiative