https://www.gsaig.gov/content/gsa-misled-customers-logingovs...
The executive summary says: "Our evaluation found GSA misled their customer agencies when GSA failed to communicate Login.gov’s known noncompliance with the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-63-3, Digital Identity Guidelines. Notwithstanding GSA officials’ assertions that Login.gov met SP 800-63-3 Identity Assurance Level 2 (IAL2) requirements, Login.gov has never included a physical or biometric comparison for its customer agencies. Further, GSA continued to mislead customer agencies even after GSA suspended efforts to meet SP 800-63-3. GSA knowingly billed IAL2 customer agencies over $10 million for services, including alleged IAL2 services that did not meet IAL2 standards. Furthermore, GSA used misleading language to secure additional funds for Login.gov."
https://www.gsaig.gov/sites/default/files/ipa-reports/OIG%20...
>18F’s cumulative net loss from its launch in FY 2014 through the third quarter of FY 2016 is $31.66 million. We found that 18F’s plan to achieve full cost recovery has been unsuccessful because of inaccurate financial projections, increased staffing levels, and the amount of staff time spent on non-billable activities. 18F managers have repeatedly overestimated revenue and, with the support of the Administrator’s office, hired more staff than revenue could support. In addition, 18F staff spent over half of their time on non-billable projects. 18F managers have recently revised their projected breakeven date from 2019 to 2020.
