NIST SP 800-63C-4:Digital Identity Guidelines - Federation and Assertions

Published

August 1, 2025

Author(s)

Justin Richer, James L. Fenton, Naomi Lefkovitz, David Temoshok, Ryan Galluzzo, Andrew Regenscheid, Yee-Yin Choong

Abstract

This guideline focuses on the use of federated identity and the use of assertions to implement identity federations. Federation allows a given credential service provider to provide authentication attributes and (optionally) subscriber attributes to a number of separately-administered relying parties. Similarly, relying parties may use more than one credential service provider. The guidelines are not intended to constrain the development or use of standards outside of this purpose. This publication supersedes NIST Special Publication (SP) 800-63C.

Citation

Special Publication (NIST SP) - 800-63C-4

Report Number

800-63C-4

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.SP.800-63C-4

Local Download

Keywords

assertions, authentication, credential service provider, digital authentication, digital wallets, federations, identity provider.

Citation

Richer, J. , Fenton, J. , Lefkovitz, N. , Temoshok, D. , Galluzzo, R. , Regenscheid, A. and Choong, Y. (2025), NIST SP 800-63C-4:Digital Identity Guidelines - Federation and Assertions, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-63C-4, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=959883 (Accessed October 17, 2025)