NIST SP 800-63 Digital Identity Guidelines NISTSP63-4: IAL3 In-Person and Supervised Remote Identity Proofing

Implement IAL3 identity proofing per NIST SP 800-63A Section 5.3.3 and Section 5.3.4. IAL3 requires (a) Two pieces of SUPERIOR evidence or one SUPERIOR plus two STRONG or three STRONG pieces, (b) Biometric collection at enrolment per Section 5.2.3 enabling subsequent binding to the live applicant, (c) In-Person Proofing per Section 5.3.3 (physical presence) OR Supervised Remote Proofing per Section 5.3.4 (live remote interaction with a trained operator + video + biometric capture + secure transmission + tamper-evident technology + audit trail), (d) Trusted Referee and Applicant References per Section 5.3.5 where supported by the agency to address equity gaps, (e) Identity Proofing Record Retention per Section 5.3.6 including evidence + biometric + transcripts as required by Section 5.5. IAL3 is appropriate for high-risk transactions where impersonation harm is severe (financial fraud + safety risk + significant breach of public interest).