IAL3 Kits at the office or home
A compact, controlled kit ships to the user in all 50 states and 32+ countries, and goes back on a prepaid label after the session.
See IAL3 Kit coverageWhat NIST SP 800-63A-4 Requires at IAL3
IAL3 identity proofing SHALL only be delivered as on-site attended
, and the proofing agent MAY be co-located with the applicant or attend the identity proofing session via a CSP-controlled kiosk or device
(§4.3.1).
When the agent attends through a kiosk or device, the provider must also monitor the whole session over high-resolution video, keep a live agent present for evidence collection, validation and verification, and protect every device from tampering (§4.3.8). Earlier revisions of SP 800-63 called this approach supervised remote identity proofing (SRIP).
Can reach IAL3
Agent in the room
On-site attended, co-located. The applicant and agent share a secure physical setting the provider controls (§4.3.7).
Can reach IAL3
Agent through a controlled kit or kiosk
On-site attended, kiosk-based. The applicant uses a provider-controlled kit or kiosk at an approved location while the agent attends over video. This is how Trust Swiftly runs IAL3.
IAL2 at most
Agent over video on the applicant's own device
Remote attended. The location and device aren't controlled by the provider (§2.1.3), so it can reach IAL2 but not IAL3, which is on-site attended only.
An IAL3 Session, Step by Step
A session typically takes 3 to 10 minutes once the kit or kiosk is in place.
-
The kit or kiosk is ready
An IAL3 Kit ships to the user's approved office or home, or the session runs on a kiosk at your office. Every device is Trust Swiftly-managed and inspected.
-
The user picks a time
They choose a session time in the Trust Swiftly user portal and can reschedule without involving HR or security.
-
A trained agent joins
The agent attends over high-resolution video for the whole session and sees every action the applicant takes.
-
Evidence is collected and validated
The kit reads the passport chip over NFC or scans the document, and the agent can inspect its security features. One SUPERIOR piece of evidence, two STRONG, or one STRONG and one FAIR meets IAL3 (§4.3.2).
-
Biometric match and liveness
The applicant's face is compared with the evidence portrait, with liveness and presentation attack checks, and a biometric sample is retained as SP 800-63A-4 requires (§4.3.3).
-
The authenticator is bound
The user's first authenticator is bound while the agent still attends (§4.3.10).
-
Notification and evidence
A notification of proofing goes to a validated address (§4.3.9), and the signed evidence package is ready for your assessor. The kit returns on a prepaid label and is inspected.
Planning attended IAL3 for a FedRAMP High (Class D) program?
Talk to an IAL3 SpecialistIAL3 Kits and Kiosks
Both are Trust Swiftly-controlled devices at an approved private location, with the same attended session and the same evidence.
Kiosks at your office
Fixed or portable kiosks for teams on site. Fixed kiosks are installed in about an hour, and portable units arrive ready to use.
Compare kits and kiosksAttended IAL3 Questions
Is this the same as supervised remote identity proofing (SRIP)?
Earlier revisions of SP 800-63 used that name. SP 800-63A-4 calls it on-site attended proofing, kiosk-based: the applicant uses a provider-controlled kiosk or device while a live agent attends over video.
Can IAL3 run on the applicant's own phone or computer?
No. Proofing on a device the provider doesn't control can reach IAL2 at most. IAL3 is on-site attended only, and Trust Swiftly sessions run only on its own managed kits and kiosks.
Where can a session take place?
Only at an approved private location: a company office, a private office or reserved room, or the user's home office. Never a public place.
How long does a session take?
Typically 3 to 10 minutes once the kit or kiosk is in place.
What does the agent check?
The agent watches the whole session, sees every action the applicant takes, confirms the biometric sample comes from the applicant, and is trained to spot signs of manipulation, coercion or social engineering.
Can users outside the US be verified?
Yes. IAL3 Kits ship to 32+ countries, and other locations are reviewed case by case.
Can we add other verification methods, such as a smart card reader?
Yes, extra hardware can be added. Document and biometric methods are already supported; custom integrations may carry added costs.
Go Deeper on Attended IAL3
Plan Attended NIST IAL3 Sessions for Your Team
Tell us who needs IAL3 and where they work. A specialist replies within one business day, or book a call now.