BaselineWatch
Desk

6.3 Discovery and Registration

NIST PIV and digital identity SP 800-217 (Draft)
All changes in this version
first version loaded 6 Protocol Requirements 996 part of 6

Title

Discovery and Registration

Control

The IdP SHALL publish its configuration information in a standard machine-readable format and location that are appropriate to the federation protocol in use. The information in the configuration document SHALL be sufficient to allow for the automated configuration of an RP contacting the IdP even when the RP is statically registered.

IdPs operating at FAL2 and below SHOULD allow RPs to register dynamically, as described in [SP800-63C] . Assertions issued to dynamically registered RPs SHALL contain pairwise subject identifiers.