NIST SP 800-63-4
| NIST SP 800-63-4 | |
|---|---|
| The 2025 final version of NIST Digital Identity Guidelines for identity proofing, authentication and federation. | |
| Publisher | NIST |
| Official resource | Official publication |
NIST SP 800-63-4 the 2025 final version of NIST Digital Identity Guidelines for identity proofing, authentication and federation. [1]
Publication
NIST SP 800-63-4 was finalized in July 2025 and supersedes SP 800-63-3. The series includes parts focused on identity proofing and enrollment, authenticators, and federation.
Intended scope
NIST describes these guidelines primarily in relation to users such as employees, contractors and private individuals interacting with government information systems. They should not be represented as a dedicated robot identity standard. [2]
Broader relevance
The publication provides useful background on assurance, authentication and federation. Machine identity architectures may draw on adjacent concepts but must separately address non-human credential lifecycles.
Reading the standard
Different technical requirements apply to different assurance levels and components. Any compliance claim must use the official full publication and the applicable policy context.
See also
References
- ↑ “Digital Identity Guidelines, SP 800-63-4 (final, July 2025)”. NIST. Retrieved 2026-10-08.
- ↑ “Zero Trust Architecture, SP 800-207”. NIST. Retrieved 2026-10-08.