Ephemeral Identities in IPSIE

[dhs-BI]

As discussed on the February 25, 2025 call, IPSIE should consider how to handle ephemeral identities in the Identity Lifecycle. Ephemeral identities are created by JIT-like provisioning during an SSO event and only live for the length of the user's session.

Please add your use cases and additional data for ephemeral identities here for follow up at a later time.

[deansaxe]

See section 4.3 of NIST 800-63B rev4. #71. The WG will need to follow up on this and develop guidance.

[deansaxe]

As discussed on the call on June 17, 2025, we will defer this issue to a later date since this requires further discussion and should not block SL1 profiles. Future discussions may determine that this is an issue better handled by the AB Connect WG.