Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-63C-4

Digital Identity Guidelines: Federation and Assertions

Date Published: July 2025

Supersedes: SP 800-63C (03/02/2020)

Author(s)

David Temoshok (NIST), Justin Richer (Bespoke Engineering), Yee-Yin Choong (NIST), James Fenton (Altmode Networks), Naomi Lefkovitz (NIST), Andrew Regenscheid (NIST), Ryan Galluzzo (NIST)

Abstract

Keywords

assertions; authentication; credential service provider; digital authentication; federations; identity provider; digital wallets
Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.SP.800-63c-4
Download URL

Supplemental Material:
Project homepage

Publication Parts:
SP 800-63-4
SP 800-63A-4
SP 800-63B-4

Document History:
12/16/22: SP 800-63C-4 (Draft)
08/21/24: SP 800-63C-4 (Draft)
07/31/25: SP 800-63C-4 (Final)

Topics

Security and Privacy

identity & access management