NIST 800-63-4, released as the 2025 final version, marks a pivotal shift from checklist-based requirements towards risk-based Digital Identity Risk Management (DIRM) frameworks. It specifically prioritizes stronger authentication protocols like FIDO Passkeys while downgrading email OTPs and SMS to low assurance levels. The new framework emphasizes assurance levels to meet security and...