IDEF Supplemental Identity Provider Best Practices, v1.0

Profile of Identity Ecosystem Framework (IDEF) supplemental best practices that are not required but are recommended for all identity provider entities participating in the Identity Ecosystem.
Identifier https://artifacts.trustmarkinitiative.org/lib/tips/idef-supplemental-identity-provider-best-practices/1.0/
Publication Date 2018-10-01
Issuing Organization
No Responder help@trustmarkinitiative.org 404-407-8956 75 5th Street NW, Suite 900, Atlanta, GA 30308
Keywords IDEF, Identity Ecosystem Framework, Identity Provider, IDP
Legal Notice This document and the information contained herein is provided on an "AS IS" basis, and the Georgia Tech Research Institute disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, the Georgia Tech Research Institute disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.
Loading...

Trust Expression:

TIP_IDEFSupplementalCommonBestPractices and TD_IDEFRecommendedPortabilityforIdentityProviders

References (2)

 TIP  IDEF Supplemental Common Best Practices, v1.0
Description Profile of Identity Ecosystem Framework (IDEF) supplemental best practices that are not required but are recommended for all organizational entities participating in the Identity Ecosystem.
ID TIP_IDEFSupplementalCommonBestPractices
 TD  IDEF Recommended Portability for Identity Providers, v1.0
Description Specifies best practices for Identity Providers in accordance with Identity Ecosystem Framework (IDEF) best practice INTEROP-BP-A: RECOMMENDED PORTABILITY.
ID TD_IDEFRecommendedPortabilityforIdentityProviders
Provider Reference

Sources (1)

IDEF Identity Ecosystem Steering Group. Identity Ecosystem Framework (IDEF) Baseline Functional Requirements v1.0 with Supplemental Guidance. Approved on 15 Oct 2015. https://www.idesg.org/portals/0/documents/core/IDEF-Baseline-Requirement-v1.0-with-Supplemental-Guidance_MOD.pdf.

Terms (12)

Term Name Abbreviations Definition
Anonymous An interaction designed such that the data collected is not sufficient to infer the identity of the user involved nor is such data sufficient to permit an entity to associate multiple interactions with a user or to determine patterns of behavior with a user.
Digital Identity Management Function Any of the functions described in the IDESG Functional Model (registration, credentialing, authentication, authorization, and intermediation), which also encompass enrollment, identity proofing, identity vetting, access control, attribute management, transaction processing, and identity data maintenance.
Entity Any organization providing identity services.
Identifier A number or other non-attribute designation designed to specify an individual or set of individuals in a system.
Identity Ecosystem Framework IDEF The overarching set of policies, best practices and standards that serve as the policy foundation for the Identity Ecosystem.
Identity Ecosystem Steering Group IDESG A voluntary, public-private partnership dedicated to developing an Identity Ecosystem Framework (IDEF) and services to better online digital identity. The IDESG looks to advance the Identity Ecosystem called for in the National Strategy for Trusted Identities in Cyberspace (NSTIC).
Nonproprietary Published Format/Specification A known and consistent format that is published and transparent to all relying parties and identity providers in the relevant network, and is not controlled by a commercial interest.
Personal Information Broadly means any information about or linked to a user that is collected, used, transmitted, or stored in or by digital identity management functions.
Pseudonymous An interaction designed such that the data collected is not sufficient to allow the entity to infer the user involved but which does permit an entity to associate multiple interactions with the user's claimed identity.
Redress When (a) an entity offers an opportunity for a party who is transacting with it to complain or ask for adjustment, if the transaction is unsatisfactory to that other party; and (b) the entity responds clearly to each request of that kind; and (c) if the request relates to the entity's failure to comply with the IDESG Baseline Requirements, the entity cures the failure to comply, or provides a remedy for the failure.
User

In usability statements, refers to an individual human being. This does not include machines, algorithms, or other non-human agents or actors. Equivalents and related terms may include: user- centric, user-centered, human-centered, end user, individual user, user-friendly.

In security statements, may refer either to an individual natural person, or to an entity such as a company or agency: Various security requirements may confer opportunities, rights or remedies on a party or account which is served by a cybersecurity function, whether that account relates to a single human or to an organization.
User-Centric Systems, design and/or program processes that put the individual human being at the center of the activity. Equivalents and related terms may include: user, user-centered, human- centered, end user, individual user, user-friendly.
Also available as XML or JSON