NIST SP 800-63 Digital Identity Guidelines

1. Suite overview

   Digital identity risk management model and the IAL, AAL and FAL assurance levels.

2. 800-63A Identity proofing

   IAL1 to IAL3 and enrollment.

3. 800-63B Authentication

   AAL1 to AAL3, authenticators, passwords and MFA.

4. 800-63C Federation

   FAL1 to FAL3 and assertions.

5. 800-63-3 prior revision

   Guidance of the previous 800-63-3 revision, still referenced by many programs.

6. Password guidance

   Memorized secret rules: minimum length, no composition rules and screening against breached passwords.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.