A workflow is a defined sequence of tasks, processes, or activities that must be completed to achieve a specific goal. It typically includes steps, rules, decision points, and participants responsible for various actions. Workflows can be manual, automated, or a combination of both.

A workflow for credential issuance refers to the structured, step-by-step process that governs how an identity credential (such as a PIV [Personal Identity Verification] ID) is requested, approved, generated, issued, and managed. These workflows ensure compliance with security policies, identity verification standards, and lifecycle management requirements.

For example, a workflow configured for the issuance of PIV IDs as per the NIST SP 800-63-4 and FIPS 201-3, must have the steps for sponsorship, onboarding, identity proofing, enrollment, setting device and credential validity, defining the types and number of devices that can be issued, applicant’s background investigation, approval, types of certificates to be issued, issuance, activation, authentication and lifecycle. All these aspects and more can be defined through a workflow.