Implementation Resources for SP 800-63 Revision 4
NIST SP 800-63-4 · Final · July 2025
Implementation resources for SP 800-63 Revision 4
A one-stop hub for organizations putting Revision 4 of the NIST Digital Identity Guidelines into practice – FAQs, conformance criteria, reference architectures, and interactive tools that that support your digital identity program.
In July 2025, NIST released the final version of SP 800-63 Revision 4. The culmination of an almost four-year process that included foundational research, two public drafts, and nearly 6,000 individual comments from the public, Revision 4 responds to the changing digital landscape that has emerged since the last major revision was published in 2017.
The four volumes
Web versions of all four volumes are available online, or on the NIST Computer Security Resource Center site.
NIST SP 800-63-4
SP 800-63-4
Digital Identity Guidelines — the umbrella document covering identity assurance, risk management, and the §3 DIRM process.
NIST SP 800-63A-4
Identity proofing & enrollment
IAL requirements, evidence collection, and verification.
NIST SP 800-63B-4
Authentication & authenticator management
AAL requirements, passwords, MFA, lifecycle.
NIST SP 800-63C-4
Federation & assertions
FAL requirements, IdP/RP architectures, bound authenticators.
What you’ll find here
?
FAQs
Direct answers to the questions agencies ask most.
✓
Conformance criteria
Structured criteria for evaluating identity services.
⚙
Implementation tools
The DIRM Tool, reference architectures, and authenticator profiles.
★
Blog Posts
News and updates from the NIST Digital Identity Group.
📅
Webinars
Recorded sessions and live events covering rollout and federation patterns.
📨
Comments
Submit new FAQs or propose edits to existing content.