The Government Digital Service (GDS) has completed the integration of His Majesty's Revenue and Customs (HMRC) into the GOV.UK One Login system, bringing the UK's unified digital identity infrastructure to one of its largest and most sensitive user bases. The single sign-on platform now handles access to tax services for millions of citizens, representing a critical milestone in the UK's broader public sector digital transformation strategy.
HMRC's integration stands out due to the sheer scale of users and the heightened security requirements surrounding tax data. Unlike earlier department integrations, HMRC demanded stricter identity verification protocols and more granular access controls. The GDS team had to reconcile these specific requirements with the standardised One Login architecture, a challenge that required both technical adjustments and organisational alignment between the two agencies.
While the GDS has not disclosed comprehensive user migration numbers or timelines, the integration follows a phased rollout approach typical of large-scale citizen portal deployments. Questions remain about the technical obstacles encountered during integration—particularly around data privacy assessments and whether any red flags emerged before the system went live. The sensitivity of tax information places this integration under closer scrutiny than previous One Login onboardings.
The broader One Login programme aims to create a single authentication gateway for all UK government digital services, mirroring similar initiatives such as login.gov in the United States and FranceConnect in France. The UK Government Digital Service strategy positions One Login as a cornerstone of interoperability across departments, reducing the need for citizens to manage multiple credentials and agencies to maintain separate authentication systems.
Key open questions include the roadmap for onboarding further departments, the total programme cost to date, and how HMRC's integration weighs against that budget. Additionally, the fate of users unable or unwilling to migrate—and the existence and duration of any fallback mechanisms—remains unclear. So far, no major downtime events or widespread user complaints have been publicly reported since HMRC went live, though ongoing monitoring and incident transparency will be critical as adoption scales.
The HMRC integration sets a precedent for other high-stakes departments considering One Login adoption. The project's success or failure will influence both the pace and scope of the UK's ambition to consolidate digital access across the entire public sector. For organisations tracking similar efforts in digital identity and eID ecosystems across Europe, the HMRC case offers valuable lessons in balancing centralisation with security and user experience.
