From b1f693c40d18f5df0d798e7556f5ee277a505959 Mon Sep 17 00:00:00 2001 From: Mitchell Henke Date: Wed, 3 Nov 2021 14:07:48 -0500 Subject: [PATCH 1/3] Update PII validation documentation --- _pages/testing.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/_pages/testing.md b/_pages/testing.md index 6b2ba6a8..e99c229a 100644 --- a/_pages/testing.md +++ b/_pages/testing.md @@ -134,7 +134,10 @@ The list of currently handled alert names for `failed_alerts` and `passed_alerts ### Personal information verification -Login.gov collects and verifies personal information during the IAL2 proofing process. It is configured to consider almost all personal information valid in the sandbox. There is one social security number that can be entered to simulate a failure to validate personal information: “666-66-6666”. +Login.gov collects and verifies personal information during the IAL2 proofing process. Login.gov only accepts social security numbers starting with “900” as being valid in the sandbox environment to prevent users from accidentally entering real personal information. This prefixed is used because it is not valid according to the [Social Security Administration](https://secure.ssa.gov/poms.nsf/lnx/0110201035). + +To simulate a failure, enter a social security number that does not start with “900”, such as “123-45-6789”. + ### Phone number verification From 7be8c423cc1f1f198b856b5e0fc0627c8ab8b06e Mon Sep 17 00:00:00 2001 From: Mitchell Henke Date: Wed, 3 Nov 2021 15:17:59 -0500 Subject: [PATCH 2/3] Update _pages/testing.md Co-authored-by: Andrew Duthie --- _pages/testing.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_pages/testing.md b/_pages/testing.md index e99c229a..f3357d1d 100644 --- a/_pages/testing.md +++ b/_pages/testing.md @@ -134,7 +134,7 @@ The list of currently handled alert names for `failed_alerts` and `passed_alerts ### Personal information verification -Login.gov collects and verifies personal information during the IAL2 proofing process. Login.gov only accepts social security numbers starting with “900” as being valid in the sandbox environment to prevent users from accidentally entering real personal information. This prefixed is used because it is not valid according to the [Social Security Administration](https://secure.ssa.gov/poms.nsf/lnx/0110201035). +Login.gov collects and verifies personal information during the IAL2 proofing process. Login.gov only accepts social security numbers starting with “900” as being valid in the sandbox environment to prevent users from accidentally entering real personal information. This prefix is used because it is not valid according to the [Social Security Administration](https://secure.ssa.gov/poms.nsf/lnx/0110201035). To simulate a failure, enter a social security number that does not start with “900”, such as “123-45-6789”. From d3849c676bf63d2f0112bac55d080cd77dc098d6 Mon Sep 17 00:00:00 2001 From: Mitchell Henke Date: Mon, 8 Nov 2021 11:42:00 -0600 Subject: [PATCH 3/3] include both formats for deprecation notice --- _pages/testing.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/_pages/testing.md b/_pages/testing.md index f3357d1d..1322dc07 100644 --- a/_pages/testing.md +++ b/_pages/testing.md @@ -134,10 +134,9 @@ The list of currently handled alert names for `failed_alerts` and `passed_alerts ### Personal information verification -Login.gov collects and verifies personal information during the IAL2 proofing process. Login.gov only accepts social security numbers starting with “900” as being valid in the sandbox environment to prevent users from accidentally entering real personal information. This prefix is used because it is not valid according to the [Social Security Administration](https://secure.ssa.gov/poms.nsf/lnx/0110201035). - -To simulate a failure, enter a social security number that does not start with “900”, such as “123-45-6789”. +Login.gov collects and verifies personal information during the IAL2 proofing process. It is configured to consider almost all personal information valid in the sandbox. There is one social security number that can be entered to simulate a failure to validate personal information: “666-66-6666”. +Beginning November 22nd, 2021, Login.gov will only accept social security numbers starting with “900” as being valid in the sandbox environment to prevent users from accidentally entering real personal information. This prefix is used because it is not valid according to the [Social Security Administration](https://secure.ssa.gov/poms.nsf/lnx/0110201035). To simulate a failure, enter a social security number that does not start with “900”, such as “123-45-6789”. ### Phone number verification