This document provides guidance on electronic authentication (E-Authentication, which is the process of establishing confidence in user identities electronically presented to an information system. Authentication focuses on confirming a person’s identity, based on the reliability of his or her credential. Office of Management and Budget (OMB) Memorandum M-04-04, Guidance for Federal Agencies requires federal information system owners determine the system’s electronic authentication (E-Authentication) requirements to minimize the potential impact of authentication errors and misuse of credentials. OMB Memorandum M-04-04 can be at the following URL: This E-Authentication Plan provides an overview of the security requirements for the () in accordance with OMB Memo M-04-04. Table 21 Information System Name and Title Unique Identifier Information System Name Information System Abbreviation The OMB memo defines four authentication levels to categorize a federal information system’s E-Authentication posture. The OMB Memo defines the four E-Authentication levels as: 1: Little or no confidence in the asserted identity’s validity Level 2: Some confidence in the asserted identity’s validity Level 3: High confidence in the asserted identity’s validity Level 4: Very high confidence in the asserted identity’s validity Selecting the appropriate E-Authentication level for a system enables the system owner to determine the right system authentication technology solution for the selected E-Authentication level. Guidance on selecting the system authentication technology solution is available in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-63, Revision 2, Electronic Authentication Guideline. NIST SP 800-63, Revision 2 can be found at the following URL: has assessed the potential risk from E-Authentication errors, or E-Authentication misuse, related to a user’s asserted identity. has into consideration the potential for harm (impact) and the
This document provides guidance on electronic authentication (E-Authentication, which is the process of establishing confidence in user identities electronically presented to an information system. Authentication focuses on confirming a person’s identity, based on the reliability of his or her credential. Office of Management and Budget (OMB) Memorandum M-04-04, Guidance for Federal Agencies requires federal information system owners determine the system’s electronic authentication (E-Authentication) requirements to minimize the potential impact of authentication errors and misuse of credentials. OMB Memorandum M-04-04 can be at the following URL: This E-Authentication Plan provides an overview of the security requirements for the () in accordance with OMB Memo M-04-04. Table 21 Information System Name and Title Unique Identifier Information System Name Information System Abbreviation The OMB memo defines four authentication levels to categorize a federal information system’s E-Authentication posture. The OMB Memo defines the four E-Authentication levels as: 1: Little or no confidence in the asserted identity’s validity Level 2: Some confidence in the asserted identity’s validity Level 3: High confidence in the asserted identity’s validity Level 4: Very high confidence in the asserted identity’s validity Selecting the appropriate E-Authentication level for a system enables the system owner to determine the right system authentication technology solution for the selected E-Authentication level. Guidance on selecting the system authentication technology solution is available in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-63, Revision 2, Electronic Authentication Guideline. NIST SP 800-63, Revision 2 can be found at the following URL: has assessed the potential risk from E-Authentication errors, or E-Authentication misuse, related to a user’s asserted identity. has into consideration the potential for harm (impact) and the
SSP-A03-FedRAMP-E-Authentication-Plan-Template-v2.11-1.docx