BaselineWatch
Desk

8 Security

NIST PIV and digital identity SP 800-63C
All changes in this version
first version loaded 8 Security

Title

Security

Control

This section is informative.

Since the federated authentication process involves coordination between multiple components, including the CSP which now acts as an IdP, there are additional opportunities for attackers to compromise federated identity transactions. This section summarizes many of the attacks and mitigations applicable to federation.