BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

6.4 Assertion Presentation 1163

NIST PIV and digital identity SP 800-217 (Draft)
All changes in this version
first version loaded 6 Protocol Requirements 996 part of 6

Title

Assertion Presentation 1163

Control

1164 1165 1166

1167 1168

1169 1170

1171 1172 1173 1174

1175 1176 1177

1178 1179 1180 1181 1182 1183

1184 1185 1186

1187 1188 1189 1190 1191 1192

1193 1194 The IdP SHALL support back-channel assertion presentation, if possible within the federation protocol. All back-channel presentation methods SHALL require authentication of the RP.

At all FALs, RPs SHOULD use back-channel presentation to fetch the assertion directly from the IdP, where available.

If front-channel presentation is used and the assertion contains PII, the contents of the assertion SHALL be encrypted using a key specific to the RP, as required in [SP800-63C] .