Skip to Content

Use of FICAM-Issue Profiles IA-8(4)

716  Matthew Burdick September 30, 2022  Identification and Authentication (IA)

Overview:
The information system conforms to FICAM-issued profiles.


Supplemental Guidance:
This control enhancement addresses open identity management standards. To ensure that these standards are viable, robust, reliable, sustainable (e.g., available in commercial information technology products), and interoperable as documented, the United States Government assesses and scopes identity management standards and technology implementations against applicable federal legislation, directives, policies, and requirements. The result is FICAM-issued implementation profiles of approved protocols (e.g., FICAM authentication protocols such as SAML 2.0 and OpenID 2.0, as well as other protocols such as the FICAM Backend Attribute Exchange).


Related control:SA-4.


Action Items:
1) Ensure that information systems conform to FICAM-issued profiles

 

Related Documents:
1) Identity and Access Management Policy


Additional Guidance:
Moderate FedRAMP-Defined Assignment / Selection Parameters
none


Moderate Additional FedRAMP Requirements and Guidance
none
Not Rated
Secure Code