eRA Commons Login.gov Setup: Fixing Two-Factor Sign-In Problems

Why NIH Moved eRA Commons to Login.gov

In 2021, the federal government directed agencies to consolidate identity verification around a small number of approved credential service providers. Login.gov — operated by the General Services Administration — became the standard for civilian federal agencies. NIH began requiring eRA Commons users to link their accounts to Login.gov starting in 2022, with an expanding rollout by user role.

By 2026, nearly all eRA Commons users — principal investigators, key personnel, signing officials, and financial administrators — must authenticate through Login.gov before they can access any eRA module, including Commons, ASSIST, and the RPPR system. The old username-and-password flow with no mandatory second factor is now restricted to a narrow set of legacy configurations that NIH intends to phase out entirely.

The shift is a real security improvement. Login.gov enforces phishing-resistant two-factor authentication (2FA): you log in with a password plus a second factor — typically a TOTP authenticator app, a security key, or government-issued ID verification. What most researchers actually care about: if your institution hasn't already prompted you to complete the transition, do it before your next competing grant submission or RPPR, not during the 48-hour submission window when the eRA Service Desk queue is longest.

What You'll Need Before You Start

Before linking accounts, confirm three things are in order.

One additional check: if your institution has a federated login (your university SSO appears on the eRA Commons login screen), contact your institutional research administration office before starting. Federated login has a different linking path, and the steps below may not apply directly.

Step-by-Step: Linking Your eRA Account to Login.gov

The linking process must be started from eRA Commons, not from login.gov. Going directly to login.gov takes you to your Login.gov account settings page — a dead end that many researchers mistake for an error. This is also one of the most common support calls the eRA Service Desk receives.

1. Go to the eRA Commons login page (commons.era.nih.gov) and click "Link Your Account to Login.gov."
2. Sign in to Login.gov when redirected. Use your Login.gov credentials here, not your eRA Commons password. Complete the 2FA step for your Login.gov account.
3. Enter your eRA Commons credentials manually when you're returned to the eRA Commons linking screen. Type your eRA username and password by hand. Browser autofill often populates the wrong credentials or partially fills the form, which triggers an "invalid credentials" error even when the password is technically correct.
4. Confirm the link. Once the credentials validate, eRA Commons links the two accounts and shows a confirmation screen. From this point forward, logging into any eRA module means clicking "Sign in with Login.gov" and completing your 2FA step.

If you see "This eRA Commons account is already associated with a Login.gov account" and you don't recall doing this, a previous colleague or institutional administrator may have initiated the process. Contact the eRA Service Desk — they can review and reset the association.

One thing that surprises most researchers: your eRA Commons password doesn't go away after linking. NIH still requires you to update it at least annually, even though you now sign in through Login.gov. Watch for the expiration prompt in your eRA-registered email inbox; an expired eRA password will block access even after you've successfully authenticated through Login.gov.

Common Login.gov Problems — and How to Fix Them

The Multiple-Account Problem

Some researchers have more than one eRA Commons account — often because one was created during graduate training or a postdoc and a second was created upon starting a faculty position. NIH's guidance as of mid-2026 is to consolidate duplicate accounts before linking to Login.gov.

Login.gov allows only one eRA Commons account per Login.gov identity. If you try to link a second eRA account to the same Login.gov credential, you'll get an error. If you link different Login.gov accounts to each eRA account, you end up managing two separate Login.gov identities indefinitely — which creates confusion at every future submission and every RPPR.

The consolidation request goes to the eRA Service Desk. They'll ask you to identify the account you want to keep (typically the one tied to your current PI grants and most recent award history) and the one to deactivate. Submissions, training records, and credentials in the inactive account can generally be transferred. Make this request before any submission deadline — consolidation typically takes a few business days to process, and the timeline isn't adjustable for urgency.

Managing Your Credentials Going Forward

The Login.gov and eRA Commons combination gives you two sets of credentials to maintain: your Login.gov password and your eRA Commons password. They're separate, and both need to stay current.

Set a calendar reminder to check your eRA password before each submission cycle. NIH sends expiration notices to the email address registered in eRA Commons — which may not be your current primary inbox if you've changed institutions since you first created the account. An expired eRA password is one of the most common reasons researchers can't access ASSIST in the week before a deadline, and it's not obvious that this is the problem when Login.gov authentication itself succeeds.

Login.gov passwords don't expire on a forced annual cycle, but Login.gov does deactivate dormant accounts. If you've had a gap in grant activity — a sabbatical, a postdoc-to-faculty transition, extended fieldwork — log into login.gov at least once before your next eRA session to confirm the account is still active. If your institution migrates or updates its SSO system, the federated login path may change; your research administration office will communicate this, and those emails are worth reading before the next submission cycle begins.

Frequently Asked Questions