U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

NIST SP 1800-13 (Initial Public Draft)

Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders

Date Published: April 2018
Comments Due: July 13, 2018 (public comment period is CLOSED)
Email Questions to: psfr-nccoe@nist.gov

Author(s)

Paul Grassi (NIST), William Fisher (NIST), Spike Dog (MITRE), Santos Jha (MITRE), William Kim (MITRE), Taylor McCorkill (MITRE), Joseph Portner (MITRE), Mark Russell (MITRE), Sudhi Umarji (MITRE), William Barker (Dakota Consulting)

Announcement

On-demand access to public safety data is critical to ensuring that public safety and first responder (PSFR) personnel can protect life and property during an emergency. Gaining quick access to information in the field requires heavy reliance on mobile platforms, which might be used to access sensitive information such as personally identifiable information, law enforcement sensitive information, and protected health information. Securing that data is a high priority; however, complex login requirements can slow the process of providing emergency services, and any delay—even seconds—can sometimes become a matter of life or death.

In collaboration with stakeholders, the NCCoE aims to help PSFR personnel efficiently and securely gain access to their mission-critical data via mobile devices and applications.

This guide illustrates a method for public safety organizations to deploy efficient and interoperable multifactor authentication and single sign-on tools to protect access to sensitive information while meeting the demands of an operational environment that relies on rapid response.

Our standards-based example solution uses commercially available products and can be used in whole or in part. It can also be used as a reference to help an organization design its own, custom solution.

Abstract

Keywords

access control; authentication; authorization; identity; identity management; identity provider; single sign-on; relying party
Control Families

Access Control; Identification and Authentication

Documentation

Publication:
Draft SP 1800-13

Supplemental Material:
Project homepage

Document History:
04/16/18: SP 1800-13 (Draft)
05/29/19: SP 1800-13 (Draft)
08/25/21: SP 1800-13 (Final)