Interop Best Practice F
<< Back to Baseline Functional Requirements Index
INTEROP-BP-F. RECOMMENDED FEDERATION COMPLIANCE
When conducting digital identity management functions within an identity FEDERATION, entities SHOULD comply in all substantial respects with the published policies and system rules that explicitly are required by that FEDERATION, according to the minimum criteria set by that FEDERATION.
SUPPLEMENTAL INFORMATION
This best practice applies to entities that participate in a structured identity federation with published policies and system rules that apply to all participants in the federation. Entities are responsible for assessing and monitoring their own compliance with federation or system rules, except in cases where those rules provide for additional measures. This best practice only recommends that an entity confirm that they are in substantial compliance in all respects with the rules of the federation when operating within that federation.
Regarding "digital identity management functions", see Appendix A.
REFERENCES
References for Federation policies and rules:
- InCommon Bronze/Silver Identity Assurance profile, https://www.incommon.org/docs/assurance/IAP.pdf
- Kantara Identity Assurance Framework, https://kantarainitiative.org/confluence/display/certification/Identity+Assurance+Accreditation+and+Approval+Program
- FICAM Trust Framework Provider Adoption Process, http://www.idmanagement.gov/documents/trust-framework-provider-adoption-process-tfpap-all-levels-assurance
APPLIES TO ACTIVITIES
REGISTRATION, CREDENTIALING, AUTHENTICATION, AUTHORIZATION, INTERMEDIATION
KEYWORDS
COMPLIANCE, FEDERATION, INTEROPERABILITY, POLICIES
Quick Links: SALS | Baseline Functional Requirements v1.0 | Glossary |