Verify (UK identity system)

Verify (UK identity system)
Name	Verify
Type	Identity assurance
Owner	Government Digital Service
Launched	2014
Discontinued	2019 (operational transition)
Country	United Kingdom

Verify (UK identity system) was a federated digital identity assurance scheme introduced by the Government Digital Service and overseen by the Cabinet Office to enable citizens to access public services online. It aimed to connect private-sector identity providers with public-sector services such as HM Revenue and Customs, the Department for Work and Pensions, and the Driver and Vehicle Licensing Agency using accredited technical and organisational standards. The programme sat within broader UK initiatives including the Government Digital Service's transformation agenda, the Digital by Default strategy, and commitments made after the 2010 United Kingdom general election to modernise service delivery.

Overview

Verify sought to provide a single framework where private identity providers—ranging from financial institutions to specialist technology firms—could prove user identities to public services. It depended on an assurance model influenced by international schemes like the National Institute of Standards and Technology's identity guidelines and interoperable architectures such as the SAML and OpenID Connect protocols. Major intended benefits included reducing identity fraud against services such as HM Passport Office and NHS Digital records, enabling streamlined access to benefits administered by the Department for Work and Pensions, and lowering administrative burdens for agencies like HM Courts & Tribunals Service.

History and development

Origins trace to early 2010s UK policy documents and pilots conducted by the Cabinet Office and GOV.UK Verify Assurance Programme. The initiative followed policy lines set by the Coalition government (UK) and programs linking to the 2011 UK National Information Infrastructure debates and parliamentary inquiries into digital identity. Initial procurement and pilot phases engaged companies with backgrounds in finance, telecoms, and identity services, including firms previously working with the Barclays and Royal Bank of Scotland infrastructures, and technology vendors that had participated in projects for Microsoft and Amazon Web Services. Public testing involved services such as Driver and Vehicle Licensing Agency transactions and benefit applications administered by Department for Work and Pensions; early evaluation reports prompted iterations of technical specifications and governance under the Cabinet Office.

Design and functionality

Verify implemented a federated architecture where accredited identity providers verified users to defined "assurance levels" and issued assertions consumed by relying parties, including HM Revenue and Customs and local authorities. Authentication flows typically used standards similar to SAML 2.0 and OpenID Connect while relying on multi-factor means provided by companies with expertise in banking authentication and telecom-based verification, such as firms operating in the payments sector like Visa and Mastercard-adjacent ecosystems. Data minimisation and attribute-based assertions were core design elements, intended to limit data shared with services such as HM Passport Office and DVLA while supporting credential portability comparable to initiatives from the European Union's identity frameworks. Integration guidance addressed identity proofing against authoritative databases held by agencies including HM Revenue and Customs and Companies House.

Governance and accreditation

Governance rested with the Cabinet Office and operational delivery by the Government Digital Service, with an accreditation programme for identity providers and assessors. The scheme established criteria for technical security, privacy, and service resilience influenced by standards like those advocated by the National Cyber Security Centre and audit regimes resembling audits performed by commercial assurance bodies such as BSI Group. Contracting and procurement phases involved legal, regulatory, and commercial oversight tied to frameworks used by the Crown Commercial Service; disputes and procurement reviews drew scrutiny from parliamentary committees such as the Public Accounts Committee and select committees dealing with digital affairs.

Adoption and usage

Several private companies achieved accreditation, and public services including HM Revenue and Customs, the Driver and Vehicle Licensing Agency, and some local authorities accepted Verify credentials. Usage growth was slower than planned; factors included user experience issues observed in evaluations by the National Audit Office, integration complexity reported by agencies such as Department for Work and Pensions, and competing private-sector identity offerings. High-profile public services such as NHS Digital and elements of HM Passport Office engaged in exploratory work, while commercial sectors including banking and telecoms offered varied levels of participation.

Security, privacy, and criticisms

Verify attracted debate over privacy, digital exclusion, and centralisation. Civil liberties organisations, privacy advocates and parliamentary reports compared Verify's model with identity approaches endorsed by entities like the Information Commissioner's Office and criticised potential risks highlighted in analyses by the National Audit Office. Concerns included reliance on third-party identity providers, usability barriers identified by the Government Digital Service user research teams, and interoperability challenges when compared with EU and global identity projects debated in the European Parliament and by standards organisations such as the Open Identity Foundation.

Legacy and replacement initiatives

Operational lessons influenced subsequent UK work on digital identity, informing policy statements from the Cabinet Office and transition plans toward a market-led, standards-based approach involving the National Cyber Security Centre and cross-sector initiatives. Successor efforts considered decentralised and privacy-enhancing technologies explored by research bodies like Alan Turing Institute and industry consortia including the OpenID Foundation. The experience of Verify fed into procurement and regulatory thinking adopted in later programmes involving the Department for Digital, Culture, Media and Sport and initiatives aligned with international standards promoted by the Organisation for Economic Co-operation and Development and the International Telecommunication Union.

Category:Identity management in the United Kingdom