+Authentication Mechanisms

Authentication Mechanisms

The Cloud Service Provider provides authentication mechanisms that can force strong authentication (e.g. two or more factors) for users, IT components or applications within the cloud users' area of responsibility.These authentication mechanisms are set up at all access points that allow users, IT components or applications to interact with the cloud service.
For privileged users, IT components or applications, these authentication mechanisms are enforced.
Additonal CriteriaThe cloud service offers outofband authentication (OOB), in which the factors are transmitted via different channels (e.g. Internet and mobile network).
Supplementary Information - About the CriteriaIT components in the sense of this criterion are independently usable objects with external interfaces that can be connected with other IT components.
Access points in the sense of this criterion are those that can be accessed by users, IT components or applications via networks (for users, for example, the login screen on the publicly accessible website of the Cloud Service Provider).
Multi-factor authentication can be performed with cryptographic certificates, smart cards or tokens, for example.

1. Ülevaade

1.1 Viited

1.2 Tuvastatud nõuded

1.3 Seotud regulatsioonid

2. Tuvastatud nõuded

Nõuded

3. Seotud regulatsioonid

Regulatsioonid