Question: ASP.NET Core Identity - NIST 800-63B-4 compliance

[lveitch]

Hey everyone, I was trying to get an answer regarding the implementation of Identity and if it happens to comply with NIST 800-63B-4 guidelines around Digital Identity Authentication and Authenticator Management. I know that things are stored in SQL but didnt know if things are stored in separate tables, what algorithm is used by default, is that modifiable, where are keys stored, etc.

Just looking for some guidance on how Identity is setup from a security perspective.