Exploring Next-Generation Digital Identity, Authentication, and Navigation on VA.gov

Questions & Answers / Clarifications

This document contains questions submitted by potential vendors and the government's official responses regarding the RFI for Next-Gen Digital Identity Authentication and Navigation. It clarifies aspects of the RFI, including technical requirements, vendor expectations, and administrative details.

• Focus of RFI: The primary interest is in solutions that reduce friction with identity verification, Multi-Factor Authentication (MFA), and the overall login experience. While complementary solutions are acknowledged, they are not the main focus.
• Integration of Identity Context: Approaches integrating identity context, eligibility, and referral/navigation workflows are considered responsive, provided they do not replace VA's core identity or authentication infrastructure.
• Veteran Journeys: Specific Veteran journeys are not a focus for this RFI.
• Device Risk Solutions: While welcomed, device risk solutions are not the primary focus.
• Credential Providers: VA is open to various solutions. Replacing Login.gov and ID.me would require migrating a large user base (11 million people).
• Thin-File Users/RIDP Failures: VA has worked with ID.me to support these users while meeting IAL2 standards.
• MFA Technologies: MFA methods for Login.gov and ID.me are publicly available on their respective websites.
• Low-Bandwidth/Connectivity Data: VA does not possess formal data on Veterans affected by low-bandwidth or intermittent connectivity.
• Rough Order of Magnitude (ROM): The requirement for ROMs will be removed from the RFI due to numerous unknowns and assumptions.

This Q&A document clarifies the scope and requirements of the RFI. Notably, the ROM requirement has been removed, indicating a potential adjustment to future solicitations based on vendor feedback. Bidders should review these clarifications to ensure their responses align with the government's refined expectations.

Request for Information (RFI)

The U.S. Department of Veterans Affairs (VA) is issuing this Request for Information (RFI) to gather industry insights on capabilities, emerging approaches, and best practices for replacing the current VA.gov website. The goal is to create a premier, modern, secure, and Veteran-centric digital experience that serves as the central entry point for VA benefits, healthcare, and services. This RFI complements Notice ID: 365357 concerning next-generation digital identity, authentication, and navigation on VA.gov.

VA is interested in solutions, technologies, and approaches that can fundamentally improve the digital experience. Responses should include:

• Descriptions of relevant ideas, capabilities, and approaches.

• Case studies or examples from similar environments.

• User journey workflows for identity proofing, sign-in, recovery, and navigation.

• Known limitations, risks, and tradeoffs.

• Lessons learned from past deployments.

• Submission Deadline: February 4, 2026

• Submission Method: Email to Allison Fulton (Allison.fulton@va.gov) and Evan Schlisserman (evan.schlisserman@va.gov).

• File Format: PDF preferred; Microsoft Word acceptable.

• Page Limit: Responses should not exceed ten (10) pages, excluding appendices, company overviews, past performance, and attached visuals/diagrams.

Respondents are requested to include:

• Company or organization overview (name, location, brief description of relevant capabilities).

• Relevant experience with similar challenges.

• Responses to the topics and questions in this RFI.

• Descriptions of relevant technologies and approaches.

• Any additional information relevant to VA's objectives.

• VA may schedule follow-on discussions with selected respondents. Participation does not imply a competitive advantage.

• This RFI does not obligate the VA to pursue a procurement or award a contract. Responses will inform planning, requirements development, and potential pilot efforts.

Other / Unclassified

This document is a Market Intelligence Request from the Department of Veterans Affairs (VA) seeking information on next-generation digital identity, authentication, and navigation solutions for VA.gov and related digital services. The VA is experiencing challenges with Veterans accessing services due to issues with identity verification, multi-factor authentication (MFA), and post-authentication navigation. This request aims to gather market insights on innovative approaches that can improve the user experience for all Veterans, including those with varying levels of digital literacy, connectivity, and physical or cognitive abilities, while maintaining or exceeding current security standards (NIST IAL2 and AAL2).

This document is crucial for potential bidders interested in providing solutions related to digital identity, authentication, and user experience for government digital services. It outlines the VA's specific pain points and desired outcomes, including:

• Near-universal identity proofing success: Aiming for close to 100% success rates.
• Dramatically easier user experiences: Comparable to unlocking a smartphone.
• Enhanced security: Meeting or exceeding NIST IAL2 and AAL2 standards.
• Inclusivity: Solutions must cater to a diverse Veteran population, including those with disabilities, low digital literacy, or limited connectivity.
• Emerging technologies: Interest in solutions leveraging mobile driver's licenses (mDL), FIDO2 passkeys, digital wallets, and verifiable credentials.

Industry partners are invited to share insights on existing and emerging solutions, lessons learned, and potential tradeoffs between security and usability. The VA is not soliciting proposals at this stage but is gathering information to inform future planning and potential pilot efforts. Responses are due by January 27, 2026.

Request for Information (RFI)

This RFI is issued by the Department of Veterans Affairs (VA) to conduct market research regarding next-generation digital identity, authentication, and navigation solutions for VA.gov and the VA Health and Benefits mobile application. The VA is seeking industry insights on improving the digital experience for Veterans, particularly addressing challenges with identity verification, multi-factor authentication (MFA), post-authentication navigation, accessibility, and varying digital literacy levels. This RFI does not commit the government to a contract or reimburse any costs associated with responses.

Respondents are asked to provide a Capability Statement and a Rough Order of Magnitude (ROM).

Capability Statement Requirements:

• Describe the company's ability to meet the overall requirement.
• Address specific requirements outlined in the attached Market Intelligence Report (not provided here).
• Include descriptions of relevant ideas, capabilities, and approaches.
• Provide case studies or examples from similar environments.
• Detail user journey workflows for identity proofing, sign-in, recovery, and navigation.
• Identify known limitations, risks, and tradeoffs.
• Share lessons learned from past deployments.
• Clearly identify tools, platforms, APIs, data integrations, and operational capabilities needed, distinguishing between VA's and the respondent's contributions.
• Include a company overview (name, location, brief description of relevant capabilities).
• Describe relevant experience with similar challenges.
• Detail relevant technologies and approaches.

Rough Order of Magnitude (ROM):

• Provide an estimated cost for the proposed solution.

• Response Deadline: 2:00 PM ET on January 27, 2026.

• Submission Method: Email to Julia Renna (julia.renna@va.gov) and Evan Schlisserman (evan.schlisserman@va.gov).

• Questions Deadline: 12:00 PM ET on January 20, 2026, via email to the government contacts.

• Page Limit: 10 pages for substantive responses (excluding ROMs, appendices, company overviews, past performance, and visuals/diagrams).

• Prohibited Content: No marketing materials are allowed.

• Post RFI: Select responders may be invited for a briefing.

• All VA requirements are subject to change.

• The VA reserves the right to not respond to any, all, or select responses.

• This RFI is for market research only and does not guarantee a future solicitation.