Digital Identity
Definition
A digital identity consists of attributes that uniquely describe a person within a specific digital context.
Handling digital identities includes, depending on the system, identity proofing, registration, authentication, federation, and lifecycle management. NIST distinguishes different trust levels and processes.
Simply explained
Like a digital proof of who is interacting with a system.
Why it matters in practice
Relevant for secure customer portals, employee access, and authorization models.
Example from business
A B2B portal links user accounts with verified company roles and appropriate multi-factor authentication.
Limits and pitfalls
- Equating identity with authorization; mixing up identity proofing and authentication; forgetting lifecycle and offboarding; collecting unnecessarily many personal data.
Origin & history
NIST published Revision 4 of the Digital Identity Guidelines in 2025 with requirements and recommendations for Identity Proofing, Authentication, and Federation.
Use in mid-sized companies
- Possible applications: secure login, customer and partner portals, federated identities, and role models.
Frequently asked questions
Is digital identity just login?
No. Is authentication the same as identity proofing? No, they are different steps.
Sources
- Digital Identity Guidelines · NIST SP 800-63-4, Digital Identity Guidelines
- Leitfaden und Glossar · NIST SP 800-63-4, Leitfaden und Glossar
Source check: 10./11.10.2026.
Editorially reviewed on: