PR.AA-04 Identity assertions are protected, conveyed, and verified

Statement

Identity assertions are protected, conveyed, and verified

Example

Protect identity assertions that are used to convey authentication and user information through single sign-on systems

Example

Protect identity assertions that are used to convey authentication and user information between federated systems

Example

Implement standards-based approaches for identity assertions in all contexts, and follow all guidance for the generation (e.g., data models, metadata), protection (e.g., digital signing, encryption), and verification (e.g., signature validation) of identity assertions

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

3. Související regulace

Propojené úkoly

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final