Federation Assurance Level (FAL)

{
  "id": "MLC-T-CYB-001714",
  "term": "Federation Assurance Level (FAL)",
  "field": "Cybersecurity",
  "definition": "1. A category that describes the federation protocol used to communicate an assertion containing authentication and attribute information (if applicable) to an RP, as defined in [NIST SP 800-63-3] in terms of three levels: FAL 1 (Some confidence), FAL 2 (High confidence), FAL 3 (Very high confidence).\n\n2. A category that describes the process used in a federation transaction to communicate authentication events and subscriber attributes to an RP.\n\n3. A category describing the assertion protocol used by the federation to communicate authentication and attribute information (if applicable) to a relying party (RP). Note: NIST SP 800-63-3 describes three levels of assurance.\n\n4. A category describing the assertion protocol used by the federation to communicate authentication and attribute information (if applicable) to an RP.\n\n5. A category describing the assertion protocol used by the federation to communicate authentication and attribute information (if applicable) to a relying party.",
  "abbreviation": "FAL",
  "references": [
    "FIPS 201-3",
    "NIST SP 800-63-4; NIST SP 800-63A-4",
    "CNSSI 4009-2022 from NIST SP 800-63-3 (adapted)",
    "NIST SP 800-63-3 [Superseded]",
    "NIST SP 1800-17b",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/federation-assurance-level-fal/"
}