Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

A Credential Reliability and Revocation Model for Federated Identities



Hildegard Ferraiolo


A large number of Identity Management Systems (IDMSs) are being deployed worldwide that use different technologies for the population of their users. With the diverse set of technologies, and the unique business requirements for organizations to federate, there is no uniform approach to the federation process. Similarly, there is no uniform method to revoke credentials or their associated attribute(s) in a federated community. In the absence of a uniform revocation method, this document seeks to investigate credential and attribute revocation with a particular focus on identifying missing requirements. This document first introduces and analyzes the different types of digital credentials and recommends missing revocation-related requirements for each model in a federated environment. As a second goal, and as a by-product of the analysis and recommendations, this paper suggests a credential reliability and revocation service that serves to eliminate the missing requirements.
NIST Interagency/Internal Report (NISTIR) - 7817
Report Number


authentication, , assertion, identity management, identity management system (IDMS), information, security, credential, identity attributes


Ferraiolo, H. (2012), A Credential Reliability and Revocation Model for Federated Identities, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], (Accessed May 29, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created November 29, 2012, Updated November 10, 2018