Before you launch
We’ve worked to make publishing a government site on Federalist as simple as possible. Please note that while the entire process usually takes a couple days, it may take up to a week, so plan accordingly.
You must have an active, signed IAA with Federalist. Sandbox accounts without IAAs will be unable to configure custom domains and preview urls are not suitable for production use.
Your agency must accept the risk of launching a site on Federalist. This requirement varies by agency, some will accept Federalist’s GSA Agency ATO while others may require additional documentation.
You must understand your responsibilities.
Ensure you know how, or who to contact to make changes to the DNS configuration for your domain.
If necessary, obtain a custom domain.
- Notify Federalist support of your intent to launch along with your repository name/url and production-ready git branch via:
- Federalist support will:
- initiate GSA IT-provided scans of the preview build and source code of your site to identify any vulnerabilites
- send you a brief site questionnaire that must be completed before continuing
Complete the site questionnaire and resolve all required vulnerabilities identified by the scans as identified by Federalist Support (this may take several scans)
Your site will now be live!
A scan of your custom domain will be run by GSA IT just to verify the final configuration, then the Federalist ISSO will share the Site Review document for your product owner to sign
- Sign and return the Site Review document provided by the Federalist ISSO
- Notify Federalist support that you are ready to launch your site
- Complete the site questionnaire provided to you by Federalist support
- Resolve any findings identified by vulnerability scans
- Configure your DNS
- Notify Federalist support
- Update your site settings
- Sign and return the Site Review document to the Federalist ISSO