1.2 Document Structure

Before · SP 800-63B

After · SP 800-63B-4

Document Structure

Before · SP 800-63B

After · SP 800-63B-4

This document is organized as follows. Each section is labeled as either normative (i.e., mandatory for compliance) or informative (i.e., not mandatory).

• Section 1 introduces the document. This section is informative .

• Section 2 describes requirements for AALs. This section is normative .

• Section 3 describes authenticator and verifier requirements. This section is normative .

• Section 4 describes requirements for authenticator event management. This section is normative .

• Section 5 describes requirements for session management. This section is normative .

• Section 6 provides security considerations. This section is informative .

• Section 7 provides privacy considerations. This section is informative .

• Section 8 provides customer experience considerations. This section is informative .

• The References section lists publications that are cited in this document. This section is informative .

• Appendix A discusses the strength of passwords. This appendix is informative .

• Appendix B discusses syncable authenticators. This appendix is normative .

• Appendix C contains a selected list of abbreviations used in this document. This appendix is informative .

• Appendix D contains a glossary of selected terms used in this document. This appendix is informative .

• Appendix E contains a summarized list of changes in this document’s history. This appendix is informative .