BaselineWatch
Desk

1 Introduction 211

NIST PIV and digital identity SP 800-217 (Draft)
All changes in this version
first version loaded 1 Introduction 211

Title

Introduction 211

Control

212

213 214 215 216 217 218 219 220 221 222

223 224 225 226 227 228 229 230

231 232 233 234 235

236 237 238 239

240 241 242 243 244 245 246 247 248 This section is informative.

PIV Cards and derived PIV credentials allow for a very high level of trust in a PIV identity account because of the requirements and processes used in the issuance of the PIV identity account, the features of the associated PIV Card, and the binding of derived PIV credentials to the PIV identity account. This document seeks to make the benefits of the PIV identity account available to federated relying parties (RPs) through the use of identity providers (IdPs) that verify PIV credentials and provide federated assertions representing the PIV identity account. Federation technologies can facilitate the connection of these PIV identity accounts across different security domains, allowing a subscriber to leverage the trust and strength of their PIV identity account at agencies other than the agency that issued the credentials.