EXTERNAL USER MANAGEMENT SYSTEM
U.S. Department of Health & Human Services

How to Log into XMS with FIDO Security Key

This job aid assists users on how to log into FedHub on a mobile device using their FIPS 140-2 compliant FIDO security key, including the first-time user account registration process.

NOTE: FIDO security key login is supported on both desktop and mobile device. For FIDO security key log in from desktop, refer to "How to Log into XMS with Fido Security Key".

  1. Navigate to (https://xms.hhs.gov), and with your FIDO security key inserted into or presented to your device, click the FIDO security key button on the XMS login page. For quick and easy access to your applications, add this page to your browser favorites.

    XMS mobile login page with the 'FIDO 2 Security Key' login button highlighted

  2. A dialog box will be displayed requesting you enter your PIN for the FIDO security key. Type in PIN, then click "OK".

  1. Enable your FIPS 140-2 compliant FIDO security key to be used by XMS by touching the security key or tapping an NFC security key against your device.

    NOTE: If you are having trouble presenting your FIDO security key, please contact your IT helpdesk.

  2. A one-time security code will be sent to your registered email. Enter the code into the "One-time passcode" textbox and click the "Submit" button. This will direct you to your XMS user dashboard. At this point, account registration is complete. You will only need to complete steps 1 – 2 the next time you log in. If the email is associated with an existing FedHub account, stop and go to step 5.

    Complete Account Registration page for FIDO

  3. If the email is already associated with an existing account in XMS, log into XMS with your Login.gov credentials on a desktop, log into XMS with your ID.me credentials on a desktop, or log into XMS with PIV or CAC credentials and link your FIDO security key from the My Profile page.