Identity Proofing
What is Identity Proofing?
The process of verifying that a person is who they claim to be before issuing credentials, using documents, biometrics, or knowledge-based verification.
Terms that appear alongside identity proofing
Each of these is named in at least one of the same controls as identity proofing. The number is how many controls name both.
- authentication 15 shared controls
- nist 11 shared controls
- access control 6 shared controls
- multi factor authentication 4 shared controls
- impersonation 4 shared controls
- audit 4 shared controls
- identity verification 3 shared controls
- audit trail 3 shared controls
Frameworks that govern identity proofing
What the standards actually require on identity proofing
Requirements naming identity proofing across 6 standards, quoted from the control text.
Threats during the enrollment and identity proofing phase including impersonation and forgery
29115-9.2 · Enrollment and identity proofing threats →Identity Proofing | Identity Evidence. Require evidence of individual identification be presented to the registration authority
IA-12(2) · Identity Proofing | Identity Evidence. Require evidence of individual identification be presented to the registration authority →Identity Proofing | Identity Evidence. Require evidence of individual identification be presented to the registration authority
IA-12(2) · Identity Proofing | Identity Evidence. Require evidence of individual identification be presented to the registration authority →Implement IAL1 self-asserted identity proofing per NIST SP 800-63A Section 4.2. At IAL1 attributes are self-asserted by the applicant + no validation or verification of those attributes is required + identifier may be pseudonymous + attributes may be collected...
NISTSP63-2 · IAL1 Self-Asserted Identity Proofing →Conduct identity proofing per NIST SP 800-63-4 Volume A (Identity Proofing and Enrollment). Collect identity evidence per Section 4.3 (evidence quality tiers FAIR + STRONG + SUPERIOR) appropriate to IAL level.
NISTSP63R4-2 · Identity Proofing: Evidence Collection, Remote Proofing, and Identity Validation Services →Per TEFCA: identity proofing per NIST SP 800-63 + authentication for individual access.
TEFCAREC-4 · Identity Proofing and Authentication →Questions people ask about identity proofing
What is Identity Proofing?
Why is Identity Proofing important for compliance?
Which compliance frameworks address Identity Proofing?
Where can I learn more about Identity Proofing?
See how Identity Proofing applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.