6.3 Discovery and Registration
NIST PIV and digital identity SP 800-217 (Draft)
All changes in this version
All changes in this version
Title
Discovery and Registration
Control
The IdP SHALL publish its configuration information in a standard machine-readable format and location that are appropriate to the federation protocol in use. The information in the configuration document SHALL be sufficient to allow for the automated configuration of an RP contacting the IdP even when the RP is statically registered.
IdPs operating at FAL2 and below SHOULD allow RPs to register dynamically, as described in [SP800-63C] . Assertions issued to dynamically registered RPs SHALL contain pairwise subject identifiers.