ITU-T X.1250 PDF

This Recommendation describes baseline capabilities for enhancing global identity management and interoperability using public telecommunication networks and services. These baseline capabilities are grouped into functional areas:

• Common, structured identity management models

• Provision of attributes (incl. identifier), credential and capabilities

• Discovery of identity service provider resources, capabilities, and federations.

• Interoperability among management platforms, identity service providers and provider federations, including identity service bridge providers

• Security and other measures to mitigate identity threats and risks, including protection of identity resources, personally identifiable information and privacy.

• Auditing and compliance, including policy enforcement and protection of personally identifiable information

• Performance, reliability, and availability of identity management capabilities

Today's telecommunication/IT networks and services are very diverse, highly distributed, highly interconnected, yet substantially autonomous in IdM. While these networks and capabilities are evolving, their size and complexity may inhibit interoperability among IdM capabilities. For this reason, the IdM capabilities in this Recommendation rely substantially on existing network capabilities and general models – including what are effectively best practices. However, to achieve global identity management and interoperability, this Recommendation describes an evolution path and how to build on existing capabilities, where possible. It also defines an identity bridge capability that can be employed in many IdM systems and support architectures to integrate existing IdM capabilities.

The implementation of IdM capabilities in individual countries is subject to requirements specific to the national jurisdiction.

NOTE: The use of the term "identity" in this Recommendation relating to IdM does not indicate its absolute meaning. In particular, it does not constitute any positive validation of a person.