...
b. Although IdPs are required by 800-63C to meet stringent security requirements, none are placed specifically on RPs. He's just basically saying that there should be relevant operational security requirements placed on RPs as well as the IdPs. Richard said that there are quite a few requirements on RPs in 63c. Tom Jones added that he believe this shouldn't be in C.