BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

4.2 Enrollment and Identity Proofing

NIST PIV and digital identity SP 800-63-4 against SP 800-63-3
All changes in this version
removed 4 Digital Identity Model part of 4

Title changed

Before · SP 800-63-3

Enrollment and Identity Proofing

After · SP 800-63-4

Enrollment and Identity Proofing

Control changed

Before · SP 800-63-3

Normative requirements can be found in SP 800-63A , Enrollment and Identity Proofing .

The previous section introduced the participants in the conceptual digital identity model. This section provides additional details regarding the participants’ relationships and responsibilities in enrollment and identity proofing.

An individual, referred to as an applicant at this stage, opts to be identity proofed by a CSP. If the applicant is successfully proofed, the individual is then termed a subscriber of that CSP.

The CSP establishes a mechanism to uniquely identify each subscriber, register the subscriber’s credentials, and track the authenticators issued to that subscriber. The subscriber may be given authenticators at the time of enrollment, the CSP may bind authenticators the subscriber already has, or they may be generated later as needed. Subscribers have a duty to maintain control of their authenticators and comply with CSP policies in order to maintain active authenticators. The CSP maintains enrollment records for each subscriber to allow recovery of authenticators, for example, when they are lost or stolen.

After · SP 800-63-4

Normative requirements can be found in SP 800-63A , Enrollment and Identity Proofing .

The previous section introduced the participants in the conceptual digital identity model. This section provides additional details regarding the participants’ relationships and responsibilities in enrollment and identity proofing.

An individual, referred to as an applicant at this stage, opts to be identity proofed by a CSP. If the applicant is successfully proofed, the individual is then termed a subscriber of that CSP.

The CSP establishes a mechanism to uniquely identify each subscriber, register the subscriber’s credentials, and track the authenticators issued to that subscriber. The subscriber may be given authenticators at the time of enrollment, the CSP may bind authenticators the subscriber already has, or they may be generated later as needed. Subscribers have a duty to maintain control of their authenticators and comply with CSP policies in order to maintain active authenticators. The CSP maintains enrollment records for each subscriber to allow recovery of authenticators, for example, when they are lost or stolen.