One Identity, Seamless Access.

The secure Public Service Single Sign-On gateway to Kenya's TRIMS ecosystem and every connected government service — one account, verified once.

Sign up Log in
TRIMS dashboard on TaifaSSO
About TaifaSSO

One Trusted Identity For
Every Connected Service

Verify once

Sign in a single time with MFA-backed credentials — TOTP or SMS verified against the national register.

Password risk exposure
Weak credentials
160
Reused credentials
48
Items not using 2FA
208
679 Moderate risk

Access everywhere

Move between TRIMS, budgeting, and audit tools without re-authenticating, within your authorized permissions.

Spend
$1.7M/yr
New Applications
Box
Intercom
Datadog
243
New people joined
35
Applications managed
10
App owners needed

Stay accountable

Every session and credential grant is recorded to an immutable, auditable trail across public sector systems.

Connect your workflows Beta
Brokered access
GitHub Actions
Use these secrets in GitHub Actions workflows.
Connect →
Custom Agent OIDC
Access these secrets from OIDC-enabled agents.
Connect →
Capabilities

What TaifaSSO Actually Does

The secure Public Service Single Sign-On gateway to Kenya's TRIMS ecosystem and every connected government service — one account, verified once.

Enforced Identity Protection
Mandatory MFA enforced by statute across every public sector account — eliminating credential theft and password exposure.
Sovereign Federation
Centralized Identity Provider connecting TRIMS, eCitizen, and county revenue portals via enterprise SAML 2.0 & OIDC.
Zero Standing Privileges
Just-in-time role approval with automatic statutory session revocation, eliminating permanent admin exposure.
Real-Time Risk Engine
Continuous monitoring flags suspicious activity — impossible travel, repeated failures — triggering immediate lockouts.
Immutable Audit Trail
Cryptographic, non-repudiable transaction logs tracking every credential grant, session event, and policy alteration.
Centralized MDA Governance
Onboard and offboard thousands of users across hundreds of MDAs from a single interface, synchronized instantly.
Statutory Security & Sovereign Governance

Compliant with the most rigorous security and sovereign standards

Kenya DPA (2019)
Full statutory compliance with the Kenya Data Protection Act 2019, guaranteeing sovereign citizen data residency and strict privacy rights.
ISO/IEC 27001
Certified Information Security Management Systems (ISMS) governing infrastructure access, key custody, and cryptographic controls.
SOC 2 Type II
Audited operational controls for security, availability, and confidential handling across all public sector identity assertions.
National PKI (CA)
Cryptographic digital signature and token authentication backed by Kenya National Root Certification Authority standards.
Help Centre

Frequently Asked Questions

Common questions about the TaifaSSO platform, its integration with TRIMS, and troubleshooting steps for users across the ecosystem.

General Questions
What is TaifaSSO?

TaifaSSO is a centralized identity management platform that allows you to access multiple Government of Kenya financial systems, primarily the TRIMS ecosystem, using a single username and password.

Why do I need TaifaSSO to access TRIMS?

To ensure high-level security and auditability. Instead of every MDA managing its own login system, TaifaSSO centralizes security, making it harder for unauthorized parties to gain access to national revenue data.

Who can register for a TaifaSSO account?
  • Government Officers: Staff from Ministries, Counties, Departments, and Agencies (MCDAs) authorized to manage revenue.
Account Setup & Management
How do I create a TaifaSSO account?

For government officers, your account must be initiated by your MDA Admin and finalized via an email invitation.

I have not received my One-Time Password (OTP). What should I do?
  1. Wait at least 2 minutes; network delays can occur.
  2. Check your "Spam" or "Junk" folder if the OTP was sent via email.
  3. Ensure your mobile number is correctly input.
  4. Click "Resend OTP." If the issue persists, contact TNT Helpdesk.
Can I share my TaifaSSO credentials with a colleague?

Strictly No. TaifaSSO accounts are tied to your legal identity (National ID/Staff ID). Sharing credentials is a violation of the TRIMS Terms & Conditions and the Computer Misuse and Cybercrimes Act. Every action taken under your User ID is legally attributed to you.

Security & Multi-Factor Authentication (MFA)
Is Multi-Factor Authentication (MFA) mandatory?

Yes. For all users and transactions, MFA is a mandatory requirement to protect against identity theft and fraudulent revenue entries.

What happens if I lose the phone used for MFA?

You will need to undergo an identity verification process to reset your MFA settings. Contact your MDA Administrator (for government staff) or the TRIMS Support Team (for users) to initiate a secure reset.

How often should I change my password?

Per the National Treasury Security Policy, users are prompted to update their passwords every 90 days.

Troubleshooting Access Issues
Why is my account locked?

Accounts are automatically locked after five (5) consecutive failed login attempts. This is a security measure to prevent "brute-force" hacking attacks. Your account will remain locked for 30 minutes, after which you can try again or use the "Forgot Password" link.

I logged into TaifaSSO but I cannot see the TRIMS dashboard. Why?

TaifaSSO confirms who you are, but your permissions are managed within TRIMS. If you cannot see your dashboard, your MDA Admin may not have assigned you a specific role yet. Please contact your supervisor to confirm your role assignment.

Technical Integration
Can TaifaSSO work offline?

No. TaifaSSO requires a secure internet or Government Common Core Network (GCCN) connection to validate credentials against the central identity vault in real-time.

Contact and Support
Where can I get further assistance?