| TD: IDEF Recommended Portability for Identity Providers

IDEF Recommended Portability for Identity Providers, v1.0

Specifies best practices for Identity Providers in accordance with Identity Ecosystem Framework (IDEF) best practice INTEROP-BP-A: RECOMMENDED PORTABILITY.

Assessment Steps (4)

1 Recommended Portability Across Identity Providers (RecommendedPortabilityAcrossIdentityProviders) Does the entity provide an easy to use method to allow users to switch to new identity provider(s)? Artifact A1 Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.
2 Recommended Mechanism to Link Relying Party Accounts to New Identity Providers (RecommendedMechanismtoLinkRelyingPartyAccountstoNewIdentityProviders) Does the entity provide departing users a mechanism to link their relying party accounts with their new identity provider(s)? Artifact A1 Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.
3 Recommended Affordable Identity Account Portability (RecommendedAffordableIdentityAccountPortability) Does the entity utilize services and systems that allow for affordable identity account portability? Artifact A1 Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.
4 Recommended Portability of Privacy and Other User Preferences (RecommendedPortabilityofPrivacyandOtherUserPreferences) Wherever feasible,does the entity provide users with a mechanism for portability of their privacy and other user preferences? Artifact A1 Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.

Conformance Criteria (4)

Recommended Portability Across Identity Providers Identity providers SHOULD provide an easy to use method to allow to switch to a new provider(s). Citation IDEF Page 46
Recommended Mechanism to Link Relying Party Accounts to New Identity Providers Identity providers SHOULD provide departing USERS a mechanism to link their relying party accounts with their new provider(s). Citation IDEF Page 46
Recommended Affordable Identity Account Portability Identity providers SHOULD utilize services and systems that allow for affordable identity account portability. Citation IDEF Page 46
Recommended Portability of Privacy and Other User Preferences Wherever feasible, identity providers SHOULD provide users with a mechanism for portability of their privacy and other user preferences. Citation IDEF Page 46

Show Metadata, Sources & Terms

Hide Metadata, Sources & Terms

Metadata

Identifier

https://artifacts.trustmarkinitiative.org/lib/tds/idef-recommended-portability-for-identity-providers/1.0/

Publication Date

2018-10-01

Issuing Organization

Trustmark Initiative (https://trustmarkinitiative.org/) View Contact

Trustmark Support

help@trustmarkinitiative.org

555-555-5555

No Mailing Address

Keywords

IDEF, Account, Choice, Interoperability, Portability, Usability

Issuance Criteria

yes(ALL)

Target Recipient

Entities that want to participate in the Identity Ecosystem in the role of Identity Provider (IDP) and demonstrate satisfaction of baseline identity service requirements and best practices such as those defined by the Identity Ecosystem Framework (IDEF) 1.0.

Legal Notice

This artifact is published by the Georgia Tech Research Institute (GTRI) as part of the Trustmark Initiative. This artifact and the information contained herein is provided on an "AS IS" basis, and GTRI disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, GTRI disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.

Sources (1)

IDEF	Identity Ecosystem Steering Group. Identity Ecosystem Framework (IDEF) Baseline Functional Requirements v1.0 with Supplemental Guidance. Approved on 15 Oct 2015. https://www.idesg.org/portals/0/documents/core/IDEF-Baseline-Requirement-v1.0-with-Supplemental-Guidance_MOD.pdf.

Terms (4)

Term Name	Abbreviations	Definition
Entity		Any organization providing identity services.
Identity Ecosystem Framework	IDEF	The overarching set of policies, best practices and standards that serve as the policy foundation for the Identity Ecosystem.
Identity Ecosystem Steering Group	IDESG	A voluntary, public-private partnership dedicated to developing an Identity Ecosystem Framework (IDEF) and services to better online digital identity. The IDESG looks to advance the Identity Ecosystem called for in the National Strategy for Trusted Identities in Cyberspace (NSTIC).
User		In usability statements, refers to an individual human being. This does not include machines, algorithms, or other non-human agents or actors. Equivalents and related terms may include: user- centric, user-centered, human-centered, end user, individual user, user-friendly. In security statements, may refer either to an individual natural person, or to an entity such as a company or agency: Various security requirements may confer opportunities, rights or remedies on a party or account which is served by a cybersecurity function, whether that account relates to a single human or to an organization.

Also available as XML or JSON