8.2.1 Support Multiple Types of Identity Proofing

Before · SP 800-63A

After · SP 800-63A-4

Support Multiple Types of Identity Proofing

Before · SP 800-63A

After · SP 800-63A-4

Whether deployed by a single CSP, multiple CSPs, or through an arrangement with RP customer service representatives, the use of multiple identity proofing types as defined in Sec. 2.1.3 provides more opportunities for users to achieve positive proofing outcomes without sacrificing security or resorting to exception handling. When deployed with effective continuous improvement mechanisms, the use of multiple proofing types can support mitigation of the following common issues:

• Users who are unable to complete automated or technology-heavy processes (e.g., due to limited technology fluency, physical or cognitive disabilities) or users for whom certain processes (e.g., automated biometric recognition) may be less effective

• Users who may rely on shared computing resources that may be prone to observation or other security risks

• Users who do not have reliable access to high-speed internet or computing devices that are capable of completing remote identity proofing processes

• Users who prefer human interactions to remote or automated processes

• Users who may have failed remote or automated approaches through no fault of their own (e.g., false rejections, failure to capture)

Sections 4.1, 4.2, and 4.3 describe the acceptable types of identity proofing available for each IAL.