Registration, Proofing, and Establishment of Identity

Registration, Proofing, and Establishment of Identity

The Digital Identity Guidelines of NIST SP 800-63-3 contain recommendations to support, among other items, requirement for identity proofing and registration.

Identity Assurance Levels

IAL1

At IAL1, attributes, if any, are self-asserted or should be treated as self-asserted.

1)) 1AL2

At IAL2, identifying attributes to have been verified in person or remotely are accepted, using, at a minimum, the procedures given in SP 800-63A.

IAL3

At IAL3, in-person identity proofing is required. Identifying attributes must be verified by an authorized credential service provider (CSP) representative through examination of physical documentation as described in SP 800-63A.

Authenticator Assurance Level (AAL) refers to the authentication process.

Federation Assurance Level (FAL) refers to the strength of an assertion in a federated environment, used to communicate authentication and attribute information (if applicable) to a relying party (RP).

Identity Assurance Level (IAL) refers to the identity proofing process. A category that conveys the degree of confidence that the applicant's claimed identity is their real identity.