Digital Identity Guidelines

National Institute of Standards and Technology. (2025). Digital Identity Guidelines: Authentication and Authenticator Management.

Type

Report

Intellectual base

Grey literature

Year

2025

DOI

10.6028/nist.sp.800-63b-4

DOI registrant

National Institute of Standards and Technology

Link

https://doi.org/10.6028/NIST.SP.800-63B-4

Cited by

3 citations across 3 artifacts.

Each citation links to the sentence it supports in the citing article.

Domain-specific

• Account sharing
  • Sharing may be permitted, tolerated, prohibited, coerced, or informal; those policy judgments vary, while the structural identity collapse remains.

Mechanisms

• Challenge-Response Authentication
  • The discipline is fresh, unpredictable, single-use challenges, mutual challenge where an impostor verifier is a real risk, and binding responses to context so they can't be relayed.

    This sourceRequires fresh single-use challenges, verifier authentication where needed, and context-bound responses to resist replay and relay.

• Federated Identity Assertion
  • The discipline is to validate signature-against-anchor plus audience plus freshness on every assertion, map assurance levels deliberately, and scope which IdPs and attributes are authoritative.

    This sourceRequires verification of assertion signatures, issuer, validity window, audience, and replay status, with assurance levels and authoritative identity attributes governed by trust agreements.

Verification

Does it exist? Confirmed. This work's DOI resolves to a registered record, which fixes its identity. That is all it fixes.

Does it back the claim? Not recorded. Neither this nor any other of the 3 citations of this work carries a recorded support check.

Support is checked per citation rather than per work — the same source can be cited soundly in one article and wrongly in another. Per-citation recording began recently, so a citation with no recorded check is a gap in the record rather than evidence it went unchecked.

See how references were verified.

Links previously used in the corpus

Before the registry existed this work was also linked 1 other way.

• https://pages.nist.gov/800-63-4/sp800-63c.html ×1

Registry ID ref:5a013d53fcb8 · see in the full table