Home / ID.me Administration

ID.me Administration

Starting in 2026, ID.me will be replacing SSO’s UIN Login for new employees, retirees, and former employees of your university or agency. The exact date of its implementation at your institution will be determined by your HR office.

Administration of ID.me is primarily about guiding new employees, retirees, former employees, and certain dependents to the help they need. This guide helps administrators do that.

 

Introduction

This guide covers key concepts and recommended processes for business administrators who support employees that access A&M System SSO using ID.me.

Single Sign On

The Texas A&M University System Single Sign On (SSO) is a one-stop-shop that allows individuals from across the A&M System to login and use services, products and tools specifically for those affiliated with the A&M System or one of its members. Individuals who use SSO include:

  • Current employees, including student workers
  • Future employees (aka pre-employees)
  • Former employees, including retirees
  • Students
  • Contractors who are a Contingent Worker in Workday

SSO UIN Logins

Most A&M System members only allow active employees to log into SSO with their member credentials (e.g., Texas A&M University NetID, Texas A&M Corpus Christi IslandID). This is a standard, cybersecurity best practice that unfortunately makes it difficult for non-active employees (e.g. pre-employees, terminations, retirees) to access A&M System SSO and tools like Workday.

To grant SSO access to non-active employees, business administrators within human resources, benefits administration, and other departments, can create A&M System SSO login credentials by using the employee’s UIN.

However, in response to evolving cybercriminal tactics, the decision was made in 2024 that UIN login credentials would be phased out. ID.me was selected to replace UIN login credentials to better protect the data and privacy of individuals and the A&M System.

Where you would typically use SSO to grant access to pre-employees and retirees, you will now use ID.me. This change improves security and simplifies processes for business administrators.

About ID.me

ID.me is a 3rd-party user identity authentication platform with a long history of protecting customer data. Their customers range from consumer companies and healthcare organizations to over 20 federal agencies and 45 state government agencies, including the federal Social Security Administration and Internal Revenue Service.

Important Information Before You Begin

ID.me is the official A&M System SSO login for pre-employees and former employees, including retirees. Pre-employees and former employees log into SSO to use applications, like Workday and Insurance Billing, to access employment and benefit information.

As the business administrator responsible for managing pre-employees and former employees, you play a crucial role in their onboarding and offboarding process. Therefore, it’s important that you:

  • Create or discover the employee’s UIN.
  • Tell the employee about SSO and ID.me and explain what they are used for.
  • Ask the employee to create or use their existing ID.me account to log into SSO.
  • Emphasize to the employee that the information they enter in ID.me must exactly match the information provided to the A&M System.

For this document, employee specifically refers to those employees who can use ID.me to log into SSO (e.g. pre-employees, former employees, retirees and dependents).

Active Employees and ID.me

ID.me is not for active employees. Once an employee becomes active, they must use their member login credentials to access SSO. Active employees will get an error message if they try to login to SSO with ID.me.

ID.me login is only for:

  • Pre-employees who need SSO access before their first day
  • Former employees, including retirees
  • Benefit-eligible dependents such as surviving spouses, military dependents, and others

If your pre-employee does not need to access SSO before their first day, they do not need to create or update an ID.me account. Former employees and benefits eligible dependents will always need to create or update an ID.me account.

UIN Assignment

  • All employees need a UIN.
  • Before you create a new UIN, always search UIN Manager first to discover if the pre-employee has an existing UIN.
  • Most pre-employees need to have a UIN created for them.
  • However, some pre-employees may have an existing UIN.
  • ID.me will not work if the employee’s UIN Manager record does not include:
    • Full Legal Name
    • Social Security Number (SSN)
    • Date of Birth
    • Gender

Workday Worker Setup

  • Once an employee’s UIN is assigned to their Workday record:
    • The Worker record becomes the system of record
    • You will only use Workday to update an employee’s name, SSN, Date of Birth, and gender
  • Changes automatically flow to UIN Manager
    • Given that there are no UIN/SSN/EmployeeID conflicts

Data Matching Rules

The following information must be the same in both ID.me, UIN Manager, and Workday:

  • Full Legal Name
  • Social Security Number (SSN)
  • Date of Birth
  • Gender

If one or more of these values do not match, the employee may experience issues. The A&M System Office of IT support team will work with the employee, and potentially your HR team, to ensure accuracy and consistency across ID.me, UIN Manager, and Workday.

Employee Responsibilities and Account Setup

  • The employees’ relationship with ID.me is separate and distinct from their relationship with the A&M System.
  • The employee is responsible for their ID.me account.
  • The employee is responsible for managing their ID.me account before, during, and after their time as an employee with the A&M System.
  • If the employee has an existing ID.me account, they should use their existing ID.me account.
  • The employee is responsible for creating their ID.me account.
  • The employee must meet the requirements for a “verified identity” ID.me account, regardless of whether it is a new or existing ID.me account.
    • This includes visual verification of a valid picture ID and SSN
    • This also includes enabling multi-factor authentication
  • The employee should create/update their ID.me account using the same exact information that they provided to the A&M System.
  • When the employee uses ID.me to log into SSO for the first time, they must agree to release their attributes or else they will not be able to log into SSO.

Introduction

Below are the recommended ID.me business processes for pre-employees and former employees. Your member organization processes can be different than those outlined below. However, we highly encourage you to follow the recommended processes to minimize potential issues.

It’s important to note that automatic overnight data syncs impact certain steps in the recommended ID.me business process.

ID.me and Pre-Employees

Pre-employees can access A&M System SSO up to 45 days prior to their employment start date. This allows pre-employees to complete important onboarding tasks in applications like Workday before their first day.

Pre-employees who need to log into A&M System SSO before their first day of work should use ID.me.

Follow the steps below to grant your pre-employees SSO access:

  1. Collect the following information for your pre-employee
  • Full Legal Name
  • Social Security Number (SSN)
  • Date of Birth
  • Gender

Confirm that this information is accurate

  1. Log into UIN Manager and search for the pre-employee’s existing UIN
  • If the pre-employee does not have a UIN:
    • Create a new UIN for the pre-employee using the collected information from above.
  • If the pre-employee has an existing UIN:
    • Review the information in UIN Manager and make any necessary updates so that it matches the information provided by the pre-employee.
  1. Next, create the pre-employee’s record in Workday with as much of the following information as you can:
  • Full Legal Name
  • SSN
  • Date of Birth
  • Gender
  1. The next business day, confirm that the pre-employee’s record was successfully created in SSO by using the SSO Central or Department Administrator role.*
    • Currently, this is an overnight process. This information will not show up in SSO if you check the same day you create the pre-employee’s record in Workday.
    • Once the pre-employee record is confirmed in SSO, contact the pre-employee and tell them to log into SSO with ID.me. Feel free to use the email templates provided.
    • Please note: Do not ask the employee to log into SSO before completing the steps above or the pre-employee will experience issues
    • When you contact the pre-employee, make sure you explain:
      1. They have exactly 1 ID.me account. They should create a new ID.me account or use their existing ID.me account.
      2. Their ID.me account is theirs, independent of their employment with the A&M System.
      3. Their ID.me account data must exactly match what was provided to the A&M System.
      4. Their ID.me account must meet requirements for a “verified identity” account.
      5. Two-factor authentication is required.
  1. Provide them with these instructions to log into SSO with ID.me
    1. Visit https://sso.tamus.edu
    2. Select the ID.me icon.
    3. Create/update your ID.me account
    4. Check that the information in ID.me exactly matches what you provided the A&M system
    5. Complete all requirements for a “verified identity” account including two-factor authentication
    6. Select “agree” when asked to release your ID.me attributes

ID.me and Active Employees

Active employees, contractors, student workers, graduate students, and working retirees should use their institutional login credentials to access A&M System SSO. They will get an error message if they try to login using ID.me.

ID.me and Former Employees

Most institutions deactivate an employee’s login credentials upon termination, including retirement. Therefore, after an active employee or working retiree transitions to Terminated or Retired status, they should use ID.me to log into SSO.

The same considerations for pre-employees apply to former employees, including the data matching rules for ID.me and UIN Manager.

Follow the steps below when terminating an employee, including retirement.

      • Verify the following employee information in Workday and make updates if needed:
        • Full legal name
        • SSN
        • Date of Birth
        • Gender
      • The next business day, confirm that the employee’s record was successfully created in SSO by using the SSO Central or Department Administrator role.*
        • Currently, this is an overnight process. This information will not show up in SSO if you check the same day youmade updates in Workday.
      • Once the employee record is confirmed in SSO, contact the employee and tell them they will now use ID.me to log into SSO. Feel free to use the email templates provided.
        • Please note: Do not ask the employee to log into SSO before completing steps 1 and 2 or the employee will experience issues
        • When you contact the employee, make sure you explain:
          • They have exactly 1 ID.me account. They should create a new ID.me account or use their existing ID.me account.
          • Their ID.me account is theirs, independent of their employment with the A&M System.
          • Their ID.me account data must exactly match what was provided to the A&M System.
          • Their ID.me account must meet requirements for a “verified identity” account.
          • Two-factor authentication is required.
        • Provide them with these instructions to log into SSO with ID.me
          • Visit https://sso.tamus.edu
          • Select the ID.me icon.
          • Create/update your ID.me account
          • Check that the information in ID.me exactly matches what you provided the A&M system
          • Complete all requirements for a “verified identity” account including two-factor authentication
          • Select “agree” when asked to release your ID.me attributes

Help With ID.me

If your employee has issues with ID.me, follow these instructions:

    • If they ran into an issue when creating a new ID.me account or logging into an existing ID.me account.
      • Ask the employee to review the ID.me troubleshooting guide.
      • Tell them to contact ID.me support directly if this doesn’t resolve their issue.
    • The employee successfully created/logged into their ID.me account but cannot log into A&M SSO using ID.me.
      • Tell the employee to:
        • Email support@tamus.edu
        • Include ID.me in the subject line
        • Include their legal name, email and UIN if known
      • The A&M System IT Shared Services support team will advise on next steps.
    • The employee does not have an SSN, ITIN or is under the age of 18.
      • Use UIN login for these edge cases.

Introduction

Administrators are responsible for directing new employees, retirees, and former employees to ID.me. These email templates provide a starting point for communications with your employees.

Pre-Employee Template

Congratulations on your new role with [organization]. During your time with [organization] you’ll use The Texas A&M University System Single Sign On (SSO) as a one-stop-shop to login and access services, applications, products and tools.

As a pre-employee, you will use ID.me to log into SSO before your start date. A few important things to know before you get started:

  • You have exactly 1 ID.me account. Use your existing ID.me account if you already have one.
  • Your ID.me account is yours, independent of your employment with the A&M System.
  • Your ID.me account data must exactly match what was provided to the A&M System.
  • Your ID.me account must meet requirements for a “verified identity” account.

Please log into SSO using the instructions below.

  • Visit the SSO login pageand select the ID.me icon.
  • Create a new ID.me account or log into your existing ID.me account.
  • Make sure the following fields in your ID.me account exactly match the information you have already provided us.
    • Full Legal Name
    • SSN
    • Date of Birth
    • Gender
  • Complete all necessary requirements to obtain a “verified identity” including enabling two-factor authentication.
  • When asked if you want to release your attributes, select “agree”.
    • If you do not select “agree” you will not be able to log into SSO.
  • You should be automatically redirected the A&M System SSO menu page.
  • Reply to this email and let me know that you have successfully logged into A&M System SSO.

If you experience issues during this process, follow the recommendations below.

  • If you have problems with creating, logging into, or updating your ID.me account, review the ID.me troubleshooting guide or contact ID.me support.
  • If you are able to create/log into/update your ID.me account, but are unable to access A&M System SSO, please email support@tamus.edu and include “ID.me” in the subject line and your full legal name in the email body.

Thank you,

[Signature]

Former Employee Template

As a former employee of [organization], you will no longer log into The Texas A&M University System Single Sign On (SSO) using your [organization] credentials. Instead, you will log into SSO using ID.me.

A few important things to know before you get started:

  • You have exactly 1 ID.me account. Use your existing ID.me account if you already have one.
  • Your ID.me account is yours, independent of your employment with the A&M System.
  • Your ID.me account data must exactly match what was provided to the A&M System.
  • Your ID.me account must meet requirements for a “verified identity” account.

Please log into SSO using the instructions below.

  • Visit the SSO login pageand select the ID.me icon.
  • Create a new ID.me account or log into your existing ID.me account.
  • Make sure the following fields in your ID.me account exactly match the information you have already provided us.
    • Full Legal Name
    • SSN
    • Date of Birth
    • Gender
  • Complete all necessary requirements to obtain a “verified identity” including enabling two-factor authentication.
  • When asked if you want to release your attributes, select “agree”.
    • If you do not select “agree” you will not be able to log into SSO.
  • You should be automatically redirected the A&M System SSO menu page.

If you experience issues during this process, follow the recommendations below.

  • If you experience issues creating or updating your ID.me account, review the ID.me troubleshooting guide or contact ID.me support.
  • If you were able to create/update your ID.me account, but are unable to log into A&M System SSO, please email support@tamus.edu and include “ID.me” in the subject line and include your full legal name and UIN in the email body.

Thank you,

[Signature]