Trust Framework Solutions
The Federal Government has established Trust Framework Solutions to leverage industry-based credentials that citizens already have for other purposes. The Trust Framework Provider Adoption Process (TFPAP) is used to assess existing, industry-based Trust Frameworks and approve them as Trust Framework Providers (TFPs). TFPs in turn define the processes for assessing Identity Provider credentialing processes against federal requirements for issuance, privacy, and auditing as codified by OMB, the National Institute of Standards and Technology (NIST), and GSA. Credentials issued by an Identity Provider that has been approved by a TFP can be trusted by an agency Relying Party (RP) at a known level of assurance (LOA) comparable to a LOA used in the federal framework. Additionally, these credentials comply with the approved Scheme Profiles, which define a subset of requirements and functionality within the chosen identity scheme standard that is acceptable for Federal Government use. Given that the Trust Framework Solutions program leverages existing, industry-based frameworks, it enables a scalable model for extending identity assurance across a broad range of citizen and business needs.