ID Tech
Back to Data Cards

Data Card

ATARC publishes implementation guide for NIST SP 800-63 revision 4

The Advanced Technology Academic Research Center released a 41-page guide for agencies moving from NIST SP 800-63-3 to revision 4 of the digital identity guidelines.

2026-07-21CC-BY-4.0nistsp-800-63assurance-levelsfederal-identity

About

Digital IDPresentation Attack Detection (Liveness / PAD)

Key Facts

  • The guide was produced by ATARC's Identity Management Working Group and runs to 41 pages.
  • It covers the Identity, Authenticator, and Federation Assurance Level structure across the revision.
  • It states phishing-resistant options such as FIDO2 passkeys or PIV must be offered at AAL2, with presentation attack detection required for facial recognition at AAL2 and AAL3.

Card Text

Revision 4 changes what agencies must evidence rather than simply what they must buy, so implementation guidance matters more than the standard text alone. The emphasis on phishing-resistant authenticators and presentation attack detection signals where federal procurement requirements are heading.

Sources