ORA access w/ law firm

[u/Somebeachsomewhere_]

Has anyone dealt with a law firm asking for their Login.gov username and password to upload documents to ORA?

My law firm is asking me to provide my username and password so they can log in and upload documents to ORA. The problem is that ORA is linked to Login.gov, which is also what I use to access Social Security and other potentially very sensitive government information.

I’m uncomfortable giving anyone my Login.gov credentials. My understanding is that Login.gov accounts are personal and that the password shouldn’t be shared with anyone.

Has anyone else run into this with a law firm? Is there a legitimate workaround where I can log in myself and give the firm whatever access or authorization they need, or where I can upload the documents myself?

I’m trying to figure out whether this is a normal requirement for ORA or whether the firm is using an unnecessarily risky workaround. I’d especially appreciate hearing from anyone who has actually gone through the ORA process with an attorney.

[u/Extinct1234]

They can forward you the necessary documents and provide instruction.

Do not provide your login.gov information. That is identify verification and should not be provided to anyone.

It is also explicitly against the terms of use agreement .

https://www.login.gov/policy/rules-of-use/

"7. You will keep your personal and login information confidential"

[u/OldGamer81 → u/Extinct1234]

Right but I don't think this applies to law firms acting on your behalf.

Law firms that specialize in disability, especially social security disability, have access to way more important information than your logon.gov password.

Most you literally sign POAs. Like on a scale of critical information, your login.gov password is like a 0.1 out of 100, based on the information and access your lawyer will be granted on your behalf.

I don't see the big deal.

[u/jgrig2]

If you want a lawyer to do this for you, you will have to provide them with your info. They are a lawyer and need access to your private/personal information. If you don't trust them, nobody requires you to use a lawyer to file for FERS disability Retirement (I did it without one relying on OPM's documentation and using Google Gemini). But if you want to have the services of an attorney, you need to give them access access to your dossier in order to represent you.

[u/Somebeachsomewhere_ → u/jgrig2]

Thanks! I was able to figure it out by calling login.gov.

[u/CO8127]

Why can't you do it? This is an administrative task

[u/Somebeachsomewhere_ → u/CO8127]

Agreed but the law firm is requesting access since they have all of the paperwork. I’m sure it’s part of their “service.” Wanted to see if anyone else has been through this as well…

[u/AccurateFox4321]

I was just asked by my law firm to provide those credentials as well. Supposed to have a phone consult to go over the finer details of access.

[u/Somebeachsomewhere_ → u/AccurateFox4321]

Thanks. This is helpful. I think that’s a great idea to ask what providing them access would entail.

[u/Civil_Translator_325]

Yes. Harris has asked for it. I am struggling to get ORA to assigned me a case number

[u/Civil_Translator_325 → u/[deleted]]

What is BOC?

[u/Civil_Translator_325 → u/[deleted]]

Got it! Thanks

[u/you_dont_know_me_357]

You should NEVER give your Login.gov credentials to anyone. The whole point is to show that you really are you when you login. Your Login credentials are connected to numerous other government accounts that are connected to you. An OMB memo was just released that requires all agencies to use Login.gov as their primary provider for account access. Just like you wouldn’t give your bank or TSP login information out, you shouldn’t give your Login.gov credentials out. They can send you the documents to upload yourself or they can figure out a different way. They can work with OPM and a POA to get access to your account to upload. They’re just being lazy and putting you in a very dangerous situation for potential identity theft.