NY Citizen Services

Anonymous

Welcome to your citizen account

Sign in to access your benefits, permits, and tax records. You will not be asked for a password — Keycloak will use one of:

Passkey (WebAuthn / FIDO2) — Touch ID, Face ID, Windows Hello, or your security key.
Email magic link / OTP — a one-time code is mailed to your registered email address via Amazon SES.
SMS OTP — a one-time code is texted via Amazon SNS / End User Messaging.

The actual method is decided by Keycloak's authentication flow. Click Sign in to be redirected.

What happens next: the browser is redirected to Keycloak's /realms/<realm>/protocol/openid-connect/auth endpoint with an Authorization Code + PKCE request. Keycloak runs its passwordless flow, then redirects back to this app with an authorization code, which we exchange for OIDC tokens.