7 Federation Considerations for PIV
NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
All changes in this version
Title changed
Before · FIPS 201-2
After · FIPS 201-3
Federation Considerations for PIV
Control changed
Before · FIPS 201-2
After · FIPS 201-3
This section is normative. It defines a set of mechanisms for using federation technologies to interoperate with PIV and derived PIV credentials issued by other agencies.
Federation protocols allow a trusted IdP to assert a cardholder’s identity to an RP across a network in a secure and verifiable fashion, even if the PIV Card or derived PIV credential has been issued by another agency. The processes and requirements for federation systems are discussed in depth in [SP 800-63C]. Additional guidelines for the use of federation with PIV Credentials will be specified in [SP 800-217].