CON.10.A1 Authentication for Web Applications (B)

Developers MUST ensure that users securely and appropriately authenticate themselves to a web application before they can access protected functions or content. An appropriate authentication method MUST be selected. The selection process MUST be documented.

A central authentication component MUST be used. The central authentication component SHOULD be used with established standard components (e.g. from frameworks or program libraries). If a web application stores authentication data on a client, the user MUST be explicitly informed about the risks of this function and consent to it (“opt-in”).

The web application MUST offer the option to set limits for failed login attempts. The web application MUST inform users immediately if their password has been reset.

1. Áttekintés

1.1 Hivatkozások

1.2 Azonosított követelmények

1.3 Kapcsolódó szabályozások

2. Azonosított követelmények

3. Kapcsolódó szabályozások

Kapcsolt feladatok

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)