+PR.AA-04 Identity assertions are protected, conveyed, and verified

PR.AA-04 Identity assertions are protected, conveyed, and verified

Statement

Identity assertions are protected, conveyed, and verified

Guidance

Protect identity assertions that are used to convey authentication and user information through single sign-on systems

Guidance

Protect identity assertions that are used to convey authentication and user information between federated systems

Guidance

Implement standards-based approaches for identity assertions in all contexts, and follow all guidance for the generation (e.g., data models, metadata), protection (e.g., digital signing, encryption), and verification (e.g., signature validation) of identity assertions

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
is blocked by Authenticate, Authorize and Audit (AAA)
is blocked by Replay-Resistant Authentication
is blocked by Acceptance of External Authenticators