IA-4(7) — In-person Registration

This enhancement requires in-person registration when issuing identifiers — the person must physically appear before a registration authority to receive their credentials.

Example 1: Require all new employees to pick up their CAC/smart card and initial network credentials in person at the security office after presenting government-issued photo ID.

Example 2: For high-security systems, require users to visit the IT help desk in person with photo ID to receive their initial password and MFA enrollment token.