NIST SP 800-63B-4:Digital Identity Guidelines - Authentication and Authenticator Management

Published

August 1, 2025

Author(s)

David Temoshok, Yee-Yin Choong, Andrew Regenscheid, Ryan Galluzzo, James L. Fenton, Justin Richer, Naomi Lefkovitz

Abstract

This guideline focuses on the authentication of subjects who interact with government information systems over networks to establish that a given claimant is a subscriber who has been previously authenticated. The result of the authentication process may be used locally by the system performing the authentication or may be asserted elsewhere in a federated identity system. This document defines technical requirements for each of the three authenticator assurance levels. The guidelines are not intended to constrain the development or use of standards outside of this purpose. This publication supersedes NIST Special Publication (SP) 800-63B.

Citation

Special Publication (NIST SP) - 800-63B-4

Report Number

800-63B-4

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.SP.800-63B-4

Local Download

Keywords

authentication, authentication assurance, credential service provider, digital authentication, passwords.

Citation

Temoshok, D. , Choong, Y. , Regenscheid, A. , Galluzzo, R. , Fenton, J. , Richer, J. and Lefkovitz, N. (2025), NIST SP 800-63B-4:Digital Identity Guidelines - Authentication and Authenticator Management, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-63B-4, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=959882 (Accessed October 14, 2025)