Document ID: chunk:federal_register_of_legislation:F2024L01443:body:0:p61
Version: federal_register_of_legislation:F2024L01443
Segment Type: other
Provision Reference: 
Character Range: 212252–215350

ID Identifier:
     (a)            For PRPs, is the pairwise identifier assigned to an individual by an IXP; and
     (b)            for IXPs, the GPI or pairwise identifier assigned to an individual by an ISP.

 The generation and assignment of these unique identifiers MUST be compliant with the relevant requirements outlined in section 1.2.1 and section 1.2.2 of Schedule 1 (AGDIS Onboarding Specifications).

 The Digital ID identifiers MUST be compliant with data representation prescribed in section 2.4.4 of Schedule 1 (AGDIS Onboarding Specifications).

        2.2.1.2       Authentication Time

 Authentication Time is the date and time when the individual successfully authenticated at the ISP. An ISP MUST support this metadata value.
 An IXP MUST support brokering requests for this metadata value.

 The data representation for the date-time value is dependent upon the federation protocols being brokered. An IXP MAY need to translate values between types when brokering between different federation protocols in a transaction.

        2.2.1.3       Assurance Level

 The Assurance Level of the authenticated digital ID outlines the IP level and authentication level attained during authentication at the ISP.

 An IXP MUST broker requests for this value as requested from a PRP to the ISPs in accordance with the requirements in section 2.1.9 of Schedule 1 (AGDIS Onboarding Specifications) and requirements outlined by the federation protocols being used.

 An ISP MUST process and respond to request for the value in accordance with the requirements in section 2.1.3 of Schedule 1 (AGDIS Onboarding Specifications) and requirements outlined in the relevant federation protocols.

 The data representation for this value is specified in Schedule 1 (AGDIS Onboarding Specifications) and illustrated in Table 29 below.

        2.2.1.4       Authentication Method

 The Authentication Method value communicates to the PRP which ISP the individual used to authenticate themselves. The Authentication Method is an IXP managed value.

 An IXP MAY provide the Authentication Method based on the ISP the individual has successfully authenticated themselves if required.

 An IXP MAY cache the attribute to support subsequent SSO requests.

 An IXP MUST NOT return any information about the Authentication Method if the authentication fails or is cancelled by the individual.

 The data representation for the Authentication Method is a URN presented in Table 30 below.

        2.2.1.5       Last Updated

 Last Updated is the date and time that any of the individual's attributes were last updated.

 An IXP MUST support brokering attribute request for this value. An ISP MUST implement support for this value.
 The data representation for this attribute is dependent upon the federation protocols in use.

      2.2.2      Audit

        2.2.2.1       RP audit Identifier

 The RP audit ID requirements are outlined in section 2.1.2 of Schedule 1 (AGDIS Onboarding Specifications).

 The RP audit ID is an IXP specific value that ISPs do not need to support.

 An RP audit ID