Verify users with ID.me for access to government benefits

Verified steps

1. Apply for a partnership through the ID.me Government portal at id.me/government; ID.me will provision an OAuth 2.0 client ID and client secret for your application after reviewing your use case.
2. Implement the OAuth 2.0 authorization code flow: redirect the user to the ID.me authorization endpoint with your client_id, requested scope (e.g., identity for full identity verification), and a state parameter for CSRF protection.
3. After the user completes ID.me's identity proofing steps — which may include document upload, biometric check, and optionally a human-assisted video call — they are redirected back with an authorization code.
4. Exchange the code for an access token by POSTing to the ID.me token endpoint with your client credentials; use the access token to call the ID.me userinfo endpoint to retrieve verified identity attributes.
5. Map the returned attributes (name, date of birth, address, verification level) to your application's user record; store the ID.me sub (subject identifier) as the stable identifier for the user across sessions.
6. Handle verification failures gracefully: if ID.me cannot verify the user automatically, they may be offered a video call option — your application should present a pending state and check back when verification is complete.