Freddie Mac Makes OAuth 2.0 Mandatory for Loan Closing Advisor

Share this article!

Freddie Mac has completed a security change that mortgage lenders and technology providers using Loan Closing Advisor need to treat as an operational requirement: system-to-system connections must now use OAuth 2.0 authentication.

The change took effect Oct. 3, ending the production transition away from basic authentication for automated Loan Closing Advisor connections. Loan Closing Advisor is Freddie Mac’s tool for evaluating closing data and helping lenders identify data-quality issues before delivery.

OAuth 2.0 replaces the older practice of repeatedly transmitting a username and password with a token-based authorization framework. For lenders, LOS providers and other mortgage technology vendors, the significance is less about a new underwriting rule than about the infrastructure used to exchange loan data securely with Freddie Mac.

The deadline matters because system-to-system integrations sit behind high-volume mortgage workflows. A lender that failed to complete the authentication transition could face connection failures or interruptions in automated closing-data validation until its integration is updated correctly.

The move is part of a broader modernization of mortgage technology infrastructure. As lenders increasingly depend on APIs and automated data exchange, authentication standards become part of operational resilience as well as cybersecurity. Token-based authorization can limit the exposure created by long-lived credentials and gives system operators more control over access.

The requirement does not change the underlying purpose of Loan Closing Advisor or create a new borrower qualification standard. It changes how participating systems authenticate when communicating with the Freddie Mac service.

For mortgage companies, the practical work is therefore technical and procedural: confirm production integrations are using the required authentication method, verify credentials and token handling, test automated workflows, and make sure technology vendors have completed the same transition.

That distinction is important for lenders evaluating the impact. This is not a consumer-facing mortgage policy change, but a failed integration can still become a production problem if closing-data workflows depend on the affected connection.

Freddie Mac’s transition also illustrates how housing-finance modernization increasingly happens below the surface. Changes to APIs, data standards, authentication and appraisal formats may not alter the headline credit box, but they can materially affect how quickly and reliably lenders manufacture and deliver loans.