...
- During the Policy Authority Meeting for Federal PKI it was commented that they adopted some minor changes around 800-63-3 requirements and it was clarified that unsupervised remote identity proofing is not allowed. There were no comments on OMB.
- During the discussions about the Federal PKI Program Matt had with LaChelle, it was stressed that they need clear use and business cases to show the value to the government of using commercially available federated credentials to access government applications.
- Matt encouraged to consider situations and government agencies that are actively using certified credential from a credential provider and that it would be beneficial to explore that further and present it as use case so we can build a value proposition. He added that it would be good to coordinate this effort in order to have better impact on the message to the government.
- Andrew suggested to create a User Work Group or social group for the customers of our providers, offer them a forum to meet once a quarter to discuss issues and find common cause that may show industry adoption. Matt supported the concept and suggested to define that further.
- Matt commented that we should show to the federal government that insurance banking and state governments are looking at our certification as requirements.
- Andrew said that if State and/or industries have made TFS Approval a procurement minimum requirement they will be not pleased if this approval is eliminated.
- Matt suggested to develop the justification based on the feedback we can get from our CSPs. Therefore, he recommended that TFPs reach out the issuers (approved providers) and ID proofers that have been certified and ask them if the RFPs to which they responded include 800-63-3 as a requirement, and if so, ask them if we can we get a copy of that RFP.
Action items
- Build together a value proposition.
- Discuss and define the scope of the potential User Work Group.
- Reach out the CSPs to confirm 800-63-3 is included as a requirement on the RFPs.