Overview#
Assertion is "a positive statement, usually made without an attempt at furnishing evidence"NIST.SP.800-63C says: Assertion is a statement from a verifier to an Relying Party that contains identity information about a subscriber. Assertions may also contain verified attributes.
We can for our purposes use Assertion the same as we would use claim
More Information#
There might be more information for this subject on one of the following:- Access Control Engine
- AllComponentsMatch
- Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants
- Assertion Parameter
- Assertion Value
- Assurance Level
- Attestation
- Authentication
- Authentication Context Class
- Bearer
- Best Practices OpenID Connect
- Certificate
- Certificate Authority
- Claim
- Client_assertion_type
- Data Provenance
- Evidence
- FAL 2
- FAL 3
- Federation Assurance Level
- Federation Models
- Holder-of-Key
- Identity Proofing
- Identity Token
- Key Verification
- LOA 2
- LOA 3
- M-04-04 Level of Assurance (LOA)
- Multi-Factor Authentication
- NIST.SP.800-63
- NIST.SP.800-63-3
- NIST.SP.800-63C
- OAuth 2.0 Software Statement
- OpenAssertionType
- Proof-of-Possession
- Provenance
- SAML Assertions
- Scopes vs Claims
- Security Token
- Self-signed Certificate
- Verifiable Claims
- Verifier
- Web Authentication API
- Web Blog_blogentry_070817_1
- Web Blog_blogentry_150617_1
- Web Blog_blogentry_280717_1
- WebAuthn Authentication
- WebAuthn Authenticator
- WebAuthn Extension Identifiers
- Zero Trust
- Zero-knowledge proof