The application server must accept Federal Identity, Credential, and Access Management (FICAM)-approved third-party credentials.
Overview
Finding ID
Version
Rule ID
IA Controls
Severity
V-204808
SRG-APP-000404-AS-000249
SV-204808r981695_rule
Medium
Description
Access may be denied to legitimate users if FICAM-approved third-party credentials are not accepted.
This requirement typically applies to organizational information systems that are accessible to non-federal government agencies and other partners. This allows federal government relying parties to trust such credentials at their approved assurance levels.
Third-party credentials are those credentials issued by nonfederal government entities approved by the FICAM Trust Framework Solutions initiative.