View Information Collection Request (ICR) Package

Time Remaining Days HR Min Sec

OMB Control No:	ICR Reference No: 202608-0960-007
Status: Received in OIRA	Previous ICR Reference No:
Agency/Subagency: SSA	Agency Tracking No:
Title: Management of Authorization for Government Users, Institutions, and Customers (MAGIC)
Type of Information Collection: New collection (Request for a new OMB Control Number)	Common Form ICR: No
Type of Review Request: Regular	Date Submitted to OIRA: 09/28/2026

	Requested	Previously Approved
Expiration Date	36 Months From Approved
Responses	4,100,000	0
Time Burden (Hours)	606,667	0
Cost Burden (Dollars)	0	0

Abstract: The Social Security Administration (SSA) is creating a new public credentialing and authorization process, hereafter called Management of Authorization for Government Users, Institutions, and Customers (MAGIC), that provides secure access to SSA’s electronic services for the Business Services Online (BSO) and Government Services Online (GSO) users. MAGIC is a self-service authorization framework. Each entity will designate a Responsible Entity Officer (REO) who is authorized to execute agreements on behalf of the entity that are legally binding and enforceable. The REO should have authority to access any information available to the entity through any Social Security service; authorize the disclosure of that information when appropriate; and delegate other individuals to have access to it. Each designated REO will create a MAGIC account and self-attest, acknowledging responsibility for all business conducted in MAGIC, BSO, and GSO on behalf of their organization. As a convenience, our framework includes additional administrative roles that the REO can delegate, authorizing another individual to manage the organization’s MAGIC account. The REO and additional administrative roles have a higher level of safeguarding and security. The REO and/or additional administrative roles will delegate service roles authorizing other users to conduct specific BSO/GSO business during a specified timeframe on the organization’s behalf, which includes third-party organizations. Both the REO and Administrator can revoke service roles as well. Every user (i.e., REO, Administrator, or Service User) will use their own credential to access MAGIC and BSO/GSO. In addition, MAGIC will offer organizational REOs the option of technician assistance for unlocking and blocking user accounts within their organization, or for terminating the REO account. In this way, MAGIC will give more flexibility to organizations and businesses who do business with SSA through the BSO and GSO portals. MAGIC will offer organizations accessibility to SSA’s online services, ensuring our online services are both secure and user-friendly which both an agency priority and is vital to good public service. Respondents are individuals registering and authorizing users for access to BSO and GSO.

Authorizing Statute(s): US Code: 26 USC 6103(l)(1)A) and (l)(5) Name of Law: Internal Revenue Code
   US Code: 42 USC 432 and 1306 Name of Law: Social Security Act
   US Code: 5 USC 552a Name of Law: Privacy Act of 1974
   PL: Pub.L. 107 - 347 301 Name of Law: E-Government Act of 2002
   PL: Pub.L. 113 - 283 2521 Name of Law: Federal Information Security Modernization Act of 2014

Citations for New Statutory Requirements: None

Associated Rulemaking Information
RIN:	Stage of Rulemaking:	Federal Register Citation:	Date:
	Not associated with rulemaking

Federal Register Notices & Comments
60-day Notice:	Federal Register Citation:	Citation Date:
	91 FR 48470	07/31/2026
30-day Notice:	Federal Register Citation:	Citation Date:
	91 FR 60677	09/24/2026
Did the Agency receive public comments on this ICR? No

ICR Summary of Burden

	Total Request	Change Due to Agency Discretion
Annual Number of Responses	4,100,000	4,100,000
Annual Time Burden (Hours)	606,667	606,667
Annual Cost Burden (Dollars)	0	0

Burden increases because of Program Change due to Agency Discretion: Yes

Burden Increase Due to: Miscellaneous Actions

Burden decreases because of Program Change due to Agency Discretion: No

Burden Reduction Due to:

Short Statement: This is a new authentication platform that increases the public reporting burden. See #12 above for the burden figures. Eventually, this identity authorization process will absorb and replace the existing collection under OMB Control Number 0960-0626. We plan to accomplish this work through a series of releases. The future releases will reduce the burdens in the other existing authentication collections. We will continue to prepare change requests for the other existing authentication collections, as needed. Future Plans Due to the agile nature of our projects, we expect to make more enhancements in the future to strengthen our electronic access authorization posture. Currently, we are still finalizing our IT modernization plans for these changes. We expect to submit another change request within six to nine months to request approval for additional updates to the system, and potentially, update the burden again to include more users as we move more applications to a more secure authorization platform. *Note: The total burden reflected in ROCIS is 606,667, while the burden cited in #12 of the Supporting Statement is 103,333. This discrepancy is because the ROCIS burden reflects the following components: telephone call system wait times + learning costs. In contrast, the chart in #12 above reflects actual burden.

Annual Cost to Federal Government: $21,539,062

Does this IC contain surveys, censuses, or employ statistical methods? No

Does this ICR request any personally identifiable information (see OMB Circular No. A-130 for an explanation of this term)? Please consult with your agency's privacy program when making this determination. Yes

Does this ICR include a form that requires a Privacy Act Statement (see 5 U.S.C. §552a(e)(3))? Please consult with your agency's privacy program when making this determination. Yes

Is this ICR related to the Affordable Care Act [Pub. L. 111-148 & 111-152]? No

Is this ICR related to the Dodd-Frank Wall Street Reform and Consumer Protection Act, [Pub. L. 111-203]? No

Is this ICR related to the American Recovery and Reinvestment Act of 2009 (ARRA)? No

Is this ICR related to the Pandemic Response? No

Agency Contact: Faye Lipsky 410 965-8783 faye.lipsky@ssa.gov

View ICR - Agency Submission