About Passwords
If you are required to use two-factor authentication to access eRA Commons, you will have either a Login.gov account or an InCommon Federated account (that supports NIH’s two-factor authentication standards) associated with your eRA account. Although you will be using one of those accounts to login to Commons, you will still possess an eRA account and the password for that account must still be maintained and reset once per year.
The Password Policy for eRA account credentials describes the use and rules of using eRA account credential passwords. Please review the Password Policy for eRA applications.
Policy: http://www.era.nih.gov/files/NIH_eRA_Password_Policy.pdf.
For further information about using Login.gov or InCommon Federated accounts, see the following:
• Two-Factor Authentication: Access eRA Modules via Login.gov
• Two-Factor Authentication: Access eRA Modules via an InCommon Federated Account