NIST SP 800-63B-4 made important changes to authentication requirements in a number of areas. New methods of account recovery have been introduced, requirements of external authenticators (including wireless authenticators) have been added, and requirements for syncable authenticators (e,g., passkeys) are now included. Incremental changes to password requriements, including the separation of locally and centrally verified passwords, have also been made. This talk will discuss the important authentication changes and summarize important changes in identity proofing and federation as well.