BaselineWatch
Desk

7 Federation Considerations for PIV

NIST PIV and digital identity FIPS 201-3 against FIPS 201-2
All changes in this version
added 7 Federation Considerations for PIV

Title changed

Before · FIPS 201-2

After · FIPS 201-3

Federation Considerations for PIV

Control changed

Before · FIPS 201-2

After · FIPS 201-3

This section is normative. It defines a set of mechanisms for using federation technologies to interoperate with PIV and derived PIV credentials issued by other agencies.

Federation protocols allow a trusted IdP to assert a cardholder’s identity to an RP across a network in a secure and verifiable fashion, even if the PIV Card or derived PIV credential has been issued by another agency. The processes and requirements for federation systems are discussed in depth in [SP 800-63C]. Additional guidelines for the use of federation with PIV Credentials will be specified in [SP 800-217].