| title | description | layout | category |
|---|---|---|---|
GPO Designated Receiver |
How we verify that USPS/GPO address verification is working as expected |
article |
Team |
The U.S. Government Publishing Office sends letters on behalf of Login.gov as part of the identity proofing process. Users who cannot or do not want to verify their address with phone records have the option of receiving a physical letter that contains a code generated by Login.gov. The GPO handles the logistics of printing the letter, putting it in an envelope, and mailing it.
It's difficult to automate testing of the United States Postal Service and the U.S. Government Publishing Office, so to ensure Login.gov is sending letters as expected, a Login.gov team member is sent a letter every day. We record the day the letters were sent and received along with a few other attributes in a spreadsheet.
It takes 3-7 business days for letters to arrive. It is common to not receive any for a few days, and then receive multiple in one day. When you receive a letter, record the following data points in the GPO Designated Receiver Report:
- The date it was delivered
- The date it was printed
- The date it was enqueued
- The date it was postmarked (not always present)
If you'd like to volunteer to receive and record letters, please add your name to the Upcoming Volunteers tab of the GPO Designated Receiver Report spreadsheet. If you have any questions about the process, you can ask them in Slack in #login-team-ada.
Please make sure to record any unusual behavior observed with the letter on the Notes column of the spreadsheet. If you believe the issue requires immediate attention, please post on #login-team-ada and tag @login-oncall-ada.
Team Ada's oncall engineer updates the designated receiver configuration on (or around) the 15th of every month. Here's the process:
Remember: names and addresses are PII. When reaching out to the new receiver, please request that they supply the information to you via an ephemeral channel such as:
- Google Chat
- Private Google doc
- Video chat
Designated receiver name and address information is stored along with other IdP settings in the YAML secrets file.
To update, use the app-s3-secret script to update the gpo_designated_receiver_pii key:
gpo_designated_receiver_pii: '{"first_name": "Receiver first name", "last_name": "Receiver last name", "address1": "1234 Imaginary Ave.", "address2": "Apt B", "city": "Anytown", "state": "IL", "zipcode": "56789" }'Note also that this is a string value containing a JSON object. address2 is optional and may be omitted, but all other fields are required.
A config recycle is required to apply the updated configuration.
Please ping the new designated receiver in Slack and let them know that they should start to receive GPO letters in a few days. You can link them back to this page to refresh their memory about their responsibilities. Additionally, let the prior receiver that they should stop receiving letters in a few days.