Detections
Analytics

800-53|IA-8(4)

Title

USE OF FICAM-ISSUED PROFILES

Description

The information system conforms to FICAM-issued profiles.

Supplemental

This control enhancement addresses open identity management standards. To ensure that these standards are viable, robust, reliable, sustainable (e.g., available in commercial information technology products), and interoperable as documented, the United States Government assesses and scopes identity management standards and technology implementations against applicable federal legislation, directives, policies, and requirements. The result is FICAM-issued implementation profiles of approved protocols (e.g., FICAM authentication protocols such as SAML 2.0 and OpenID 2.0, as well as other protocols such as the FICAM Backend Attribute Exchange).

Reference Item Details

Related: SA-4

Category: IDENTIFICATION AND AUTHENTICATION

Parent Title: IDENTIFICATION AND AUTHENTICATION (NON-ORGANIZATIONAL USERS)

Family: IDENTIFICATION AND AUTHENTICATION

Baseline Impact: LOW,MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
DKER-EE-001100 - LDAP integration in Docker Enterprise must be configured.UnixDISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r2
DKER-EE-002180 - SAML integration must be enabled in Docker Enterprise.UnixDISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r2
F5BI-AP-000211 - The BIG-IP APM module must conform to FICAM-issued profiles.F5DISA F5 BIG-IP Access Policy Manager STIG v2r3
F5BI-LT-000211 - The BIG-IP Core implementation must be able to conform to FICAM-issued profiles when providing authentication to virtual servers.F5DISA F5 BIG-IP Local Traffic Manager STIG v2r3
SYMP-AG-000430 - Symantec ProxySG providing user authentication intermediary services must conform to Federal Identity, Credential, and Access Management (FICAM)-issued profiles.BlueCoatDISA Symantec ProxySG Benchmark ALG v1r3