Registrations for the 2026 AGM are now open - Click here to secure your spot!
This table lists all approved Trust Mark holders, Registered Applicants, and Accredited Assessors in our international Identity Assurance Program.
Kantara Initiative understands the increasing use of syncable authenticators and passkeys, yet at present we have issues with defining approval criteria. For this reason, we have written and published a notice stating our current position. Please click here for the full notice.
Machine-readable: JSON · CSV · Signed (JWS) · Key
Definitions
Certified functions
Kantara certifies services against three functions. Each function corresponds to a companion volume of NIST SP 800-63, and each revision of SP 800-63 titles the volumes in its own terms.
Under NIST SP 800-63 Revision 3, the functions are: Enrollment and Identity Proofing (SP 800-63A); Authentication and Lifecycle Management (SP 800-63B); and Federation and Assertions (SP 800-63C).
Under NIST SP 800-63 Revision 4, the functions are: Identity Proofing and Enrollment (SP 800-63A-4); Authentication and Authenticator Management (SP 800-63B-4); and Federation and Assertions (SP 800-63C-4).
The differing titles describe the same three functions. A service may be certified for one function, two, or all three, and every designation on the Trust Status List is stated per function, using the titles of the revision under which the service is certified.
Full Service
A Full Service delivers the whole of a function on its own. A service designated Full for identity proofing performs every part of the identity proofing process itself; no additional service is required to complete that function.
Kantara certifies services against three functions. Each function corresponds to a companion volume of NIST SP 800-63, and each revision of SP 800-63 titles the volumes in its own terms.
Under NIST SP 800-63 Revision 3, the functions are: Enrollment and Identity Proofing (SP 800-63A); Authentication and Lifecycle Management (SP 800-63B); and Federation and Assertions (SP 800-63C).
Under NIST SP 800-63 Revision 4, the functions are: Identity Proofing and Enrollment (SP 800-63A-4); Authentication and Authenticator Management (SP 800-63B-4); and Federation and Assertions (SP 800-63C-4).
The differing titles describe the same three functions. A service may be certified for one function, two, or all three, and every designation on the Trust Status List is stated per function, using the titles of the revision under which the service is certified.
Full Service
A Full Service delivers the whole of a function on its own. A service designated Full for identity proofing performs every part of the identity proofing process itself; no additional service is required to complete that function.
A service is a Full Service if it is Full for at least one function, and the designation always names the function it applies to. Full does not mean the service covers every function, and it does not require certification at more than one assurance level.
Component Service
A Component Service delivers part of a function. It is certified for the capabilities it provides, but those capabilities must be combined with other services before the function is complete.
Component Service
A Component Service delivers part of a function. It is certified for the capabilities it provides, but those capabilities must be combined with other services before the function is complete.
The designation describes coverage, not quality: criteria within a Component Service’s certified scope are assessed to the same standard as those of a Full Service.
Ready to Operate
Ready to Operate is a qualifier, not a designation. It applies when a service is assessed before it has accumulated operational history: the assessment confirms that the service is designed and built to conform, but records of live operation do not yet exist to be reviewed.
Ready to Operate
Ready to Operate is a qualifier, not a designation. It applies when a service is assessed before it has accumulated operational history: the assessment confirms that the service is designed and built to conform, but records of live operation do not yet exist to be reviewed.
The qualifier is displayed alongside the service’s designation and is removed when a follow-up assessment of the operating service is completed. A Full Service and a Component Service can each carry the qualifier.
Certification status
Status states whether a certification is current. Good Standing means the certification is active, the most recent review found the service conformant, and no conditions remain unresolved.
Certification status
Status states whether a certification is current. Good Standing means the certification is active, the most recent review found the service conformant, and no conditions remain unresolved.
Suspended means the certification is temporarily withheld while an identified concern is resolved.
Terminated or Expired means the certification has ended and the service is no longer certified.
Ready to Operate is not a status: a service carrying the Ready to Operate qualifier can be, and normally is, in Good Standing.