Appendix E: Digital Identity Level (DIL) Determination

The Digital Identity Level (DIL) is represented on the page below.

Within system-characteristics there must be three entries to the props array as follows:

• name set to identity-assurance-level and a value set to 1, 2 or 3.
• name set to authenticator-assurance-level and a value set to 1, 2 or 3.
• name set to federation-assurance-level and a value set to 1, 2 or 3.
• The value of all three should match each other and align with the FIPS-199 impact level of the system.

OSCAL Representation

system-security-plan:
  system-characteristics:
    props:
    - name: identity-assurance-level
      value: '2'
    - name: authenticator-assurance-level
      value: '2'
    - name: federation-assurance-level
      value: '2'