BaselineWatch
Desk

8 Security

NIST PIV and digital identity SP 800-63C-4 against SP 800-63C
All changes in this version
removed 8 Security

Title changed

Before · SP 800-63C

Security

After · SP 800-63C-4

Security

Control changed

Before · SP 800-63C

This section is informative.

Since the federated authentication process involves coordination between multiple components, including the CSP which now acts as an IdP, there are additional opportunities for attackers to compromise federated identity transactions. This section summarizes many of the attacks and mitigations applicable to federation.

After · SP 800-63C-4

This section is informative.

Since the federated authentication process involves coordination between multiple components, including the CSP which now acts as an IdP, there are additional opportunities for attackers to compromise federated identity transactions. This section summarizes many of the attacks and mitigations applicable to federation.