Overview#

Assertion is "a positive statement, usually made without an attempt at furnishing evidence"

NIST.SP.800-63C says: Assertion is a statement from a verifier to an Relying Party that contains identity information about a subscriber. Assertions may also contain verified attributes.

We can for our purposes use Assertion the same as we would use claim

More Information#

There might be more information for this subject on one of the following:

• Access Control Engine
• AllComponentsMatch
• Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants
• Assertion Parameter
• Assertion Value
• Assurance Level
• Attestation
• Authentication
• Authentication Context Class
• Bearer
• Best Practices OpenID Connect
• Certificate
• Certificate Authority
• Claim
• Client_assertion_type
• Data Provenance
• Evidence
• FAL 2
• FAL 3
• Federation Assurance Level
• Federation Models
• Holder-of-Key
• Identity Proofing
• Identity Token
• Key Verification
• LOA 2
• LOA 3
• M-04-04 Level of Assurance (LOA)
• Multi-Factor Authentication
• NIST.SP.800-63
• NIST.SP.800-63-3
• NIST.SP.800-63C
• OAuth 2.0 Software Statement
• OpenAssertionType
• Proof-of-Possession
• Provenance
• SAML Assertions
• Scopes vs Claims
• Security Token
• Self-signed Certificate
• Verifiable Claims
• Verifier
• Web Authentication API
• WebAuthn Authentication
• WebAuthn Extension Identifiers
• Zero Trust
• Zero-knowledge proof

w