NIST 800-63-4 marks an important shift away from checklist-based requirements toward robust phishing-resistant authentication protocols such as Multi Factor Authentication (MFA), passkeys and remote identity proofing services - now mandated.

Trustswiftly FedRAMP High IAL3 Supervised Remote Identity Proofing platform represents an architecturally transformative step, directly eliminating remote worker fraud and creating greater defense supply chain security.

NIST IAL3 Verification

NIST SP 800-63-4 has become the de facto standard for identity assurance, setting high expectations for proofing and strong, phishing-resistant authentication. Compliance with this framework is vitally important for cybersecurity, fraud, user experience teams across industries.

The NIST framework for digital identity validation outlines three assurance levels - Identity Assurance Levels (IAL), Authentication Assurance Levels (AAL), and Federation Assurance Levels (FAL). These three levels describe the degree of rigor applied when linking claimed identities with real world evidence, providing a basis for mapping risk/assurance dimensions to authentication processes. 

NIST's most rigorous IAL standard, IAL3, requires on-site attended verification with verified biometrics and rigorous evidence validation. Re-proofing may also be introduced based on risk, helping organizations better align business and security objectives for workforces. HYPR Affirm combines chat, video, facial recognition with liveness detection and document authentication with support for step up reproofing to fulfill these requirements while meeting enterprise security needs simultaneously - creating seamless nist ial3 verification of every employee at every point in their employee lifecycle.

NIST IAL3 Compliance

The new guidelines provide a core framework for digital identity, including identity proofing, authentication and federated identity management. A notable change to these guidelines is their separation of assurance levels for identity proofing and authentication allowing agencies to select levels based on business and security risk management considerations.

HYPR Affirm, our comprehensive identity verification platform, assists organizations with reaching nist 800-63-4 ial3 compliance by using chat, video, facial recognition with liveness detection, document authentication and step-up reproofing based on risk. This approach eliminates password-based methods while helping organizations meet both workforce needs and cybersecurity requirements.

NIST has made significant updates to its authentication scope. They have specifically disfavored email OTP and significantly downgraded SMS-based authentication, acknowledging their inadequacies against modern phishing attacks. Furthermore, new requirements require phishing-resistant multifactor authentication with Passkey support; further strengthening FIDO2 as the gold standard of authentication. Finally, NIST also clarified their policy on document retention for data retention purposes.

NIST IAL3 Identity Verification Software

Organizations using HYPR Affirm can achieve IAL3 compliance while meeting their business and security goals simultaneously. This can be accomplished via chat, video, facial recognition with liveness detection, document verification and authentication as well as step-up re-proofing based on risk - providing continuous identity assurance beyond single point-in-time checks - an essential requirement of compliance with IAL3.