+OPS.2.2.A18 Use of Federation Services [Process Owner] (H)

OPS.2.2.A18 Use of Federation Services [Process Owner] (H)

Customers SHOULD check whether Federation Services are being used in their cloud computing projects.

It SHOULD be ensured that a Security Assertion Markup Language (SAML) ticket only transmits the necessary information to the cloud service provider in question. Authorisations SHOULD be checked regularly so that only authorised users are issued an SAML ticket.

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos

3. Regulaciones relacionadas

Regulaciones

Incidencias vinculadas

Vínculos
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation