External User Management System (XMS)

XMS leverages ID.me for multi-factor authentication (MFA) and identity verification, both of which are required for NPDB account access.

Q&As

What is XMS?

XMS is the Department of Health and Human Services' External User Management System.

I received an XMS-3208: User Management Error when I signed in with my ID.me account. What should I do?

The XMS-3208 error means you created an account with XMS through a different MFA service. Use this help article Exit Image to add ID.me to your profile. If you continue to receive an error when logging in with MFA, please contact XMS Exit Image.

What is MFA?

Multi-factor authentication, or MFA, is an authentication method that requires users to provide two or more verification factors to gain access to a resource such as an NPDB user account. MFA is a core component of a strong identity and access management policy.

MFA requires something you know, such as a password, and something you have, like a mobile phone, for authentication.

What is Identity Verification?

Identity Verification is the process of confirming that an individual is who they claim to be. To verify your identity, sign in to your NPDB account and follow the instructions on the page.

What is ID.me?

ID.me is certified using federal standards to provide secure login and identity verification. ID.me provides a method for users to verify their identity and protect security with information systems, such as the NPDB. The ID.me secure digital identity network has over 100 million members with over 70,000 individuals joining daily, as well as partnerships with 30+ states, multiple federal agencies, and over 500 name brand retailers.