BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

2.3 Authentication and Authenticator Management (was: A Few Limitations)

NIST PIV and digital identity SP 800-63-4 against SP 800-63-3
All changes in this version
modified 2 Continuous improvement programs. Establishing a continuous evaluation part of 2

Title changed

Before · SP 800-63-3

A Few Limitations

After · SP 800-63-4

AAuthentication Fewand LimitationsAuthenticator Management

Control changed

Before · SP 800-63-3

These technical guidelines do not address the authentication of subjects for physical access (e.g., to buildings), though some authenticators used for digital access may also be used for physical access authentication. Additionally, this revision of these guidelines does not explicitly address device identity, often referred to as machine-to-machine (such as router-to-router) authentication or interconnected devices, commonly referred to as the internet of things (IoT). That said, these guidelines are written to refer to generic subjects wherever possible to leave open the possibility for applicability to devices. Also excluded are specific requirements for issuing authenticators to devices when they are used in authentication protocols with people.

After · SP 800-63-4

These[SP800-63B] technical, guidelinesAuthentication doand notAuthenticator addressManagement the, authenticationprovides normative descriptions of subjectspermitted forauthenticator physicaltypes, accesstheir characteristics (e.g., tophishing buildingsresistance), though some authenticators used for digital access mayand alsoauthentication beprocesses usedappropriate for physical accesseach authenticationAAL. Additionally, this revision of these guidelines does not explicitly address device identity, often referred to as machine-to-machine (such as router-to-router) authentication or interconnected devices, commonly referred to as the internet of things (IoT)Fig. That said, these guidelines are written to refer to generic1. subjectsSample whereverIdentity possibleProofing toand leaveEnrollment openDigital theIdentity possibilityModel forRequest applicabilityAccess toSubject devices.CSP

Applicant

Subscriber AlsoRequest excludedIdentity areEvidence specificand requirementsAttributes

Submit forIdentity issuingEvidence authenticatorsand toAttributes

Identity devicesService whenEnrollment
• theyID areProofing
• usedCSP inSubscriber authenticationAccount protocolsCreation
• withEnrollment people.Process