Draft NIST IR 8336 1 Background on Identity Federation 2 Technologies for the Public Safety 3 Community 4 5 William Fisher 6 Mark Russell* 7 Sudhi Umarji 8 Karen Scarfone 9 10 * Former employee; all work for this 11 publication was done while at employer. 12 13 14 15 This publication is available free of charge from: 16 https://doi.org/10.6028/ NIST.IR.8336 -draft 17 18 19 20 Draft NISTIR 8336 21 Background on Identity Federation 22 Technologies for the Public Safety 23 Community 24 William Fisher 25 Applied Cybersecurity Division 26 Information Technology Laboratory 27 28 Mark Russell* 29 Sudhi Umarji 30 The MITRE Corporation 31 McLean , VA 32 33 Karen Scarfone 34 Scarfone Cybersecurity 35 Clifton, VA 36 37 * Former employee; all work for this 38 publication was done while at employer. 39 40 This publication is available free of charge from: 41 https://doi.org/10.6028 /NIST.IR.8336 -draft 42 43 June 2021 44 45 46 47 U.S. Department of Commerce 48 Gina Raimondo, Secretary 49 50 National Institute of Standards and Technology 51 James K. Olthoff, Performing the Non- Exclusive Functions and Duties of the Under Secretary of Commerce 52 for Standards and Technology & Director, National Institute of Standards and Technology 53 National Institute of Standards and Technology Interagency or Internal Report 8336 54 80 pages ( June 2021) 55 This publication is available free of charge from: 56 https://doi.org/10.6028/ NIST.IR.8336 -draft 57 Certain commercial entities, equipment, or materials may be identified in this document in order to describe an 58 experimental procedure or concept adequately. Such identification is not intended to imply recommendation or 59 endorsement by NIST, nor is it intended to imply that the entities, materials, or equipment are necessarily the best 60 available for the purpose. 61 There may be references in this publication to other publications currently under development by NIST in accordance 62 with its assigned statutory responsibilities. The information in this publication, including concepts and methodologies, 63 may b e used by federal agencies even before the completion of such companion publications. Thus, until each 64 publication is completed, current requirements, guideline s, and procedures, where they exist, remain operative. For 65 planning and transition purposes, federal agencies may wish to closely follow the development of these new 66 publications by NIST. 67 Organizations are encouraged to review all draft publications during public comment periods and provide feedback to 68 NIST. Many NIST cybersecurity publications , ot her than the ones noted above, are available at 69 https://csrc.nist.gov/publications . 70 Public comment period: June 9, 2021 through July 26, 2021 71 National Institute of Standards and Technology 72 Attn: Applied Cybers ecurity Division , Information Technology Laboratory 73 100 Bureau Drive (Mail Stop 2000 ) Gaithersburg, MD 20899- 2000 74 Email: [email protected] 75 All comments are subject to release under the Freedom of Information Act (FOIA). 76 NISTIR 8336 (DRAFT) BACKGROUND ON IDENTITY FEDERATION TECHNOLOGIES FOR THE PUBLIC SAFETY COMMUNITY ii Reports on Computer Systems Technology 77 The Information Technology Laboratory (ITL) at the National Institute of Standards and 78 Technology (NIST) promotes the U.S. economy and public welfare by providing technical 79 leadership for the Nation’s measurement and standards infrastructure. ITL develops tests, test 80 methods, reference data, proof of concept implem entations, and technical analyses to advance 81 the development and productive use of information technology. ITL’s responsibilities include the 82 development of management, administrative, technical, and physical standards and guidelines for 83 the cost -effective security and privacy of other th