IA-12(6)_accept-externally-proofed-identities
Accept externally-proofed identities at [organization-defined].
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Accept externally-proofed identities at [organization-defined].
Identity proof users that require accounts for logical access to systems based on appropriate identity assurance level requirements as specified in...
Cryptographic keys that protect access tokens are generated, managed, and protected from disclosure and misuse.
The source and integrity of identity assertions and access tokens are verified before granting access to system and information resources.
In accordance with [organization-defined], assertions and access tokens are: generated; issued; refreshed; revoked; time-restricted; and audience-rest
Employ identity providers and authorization servers to manage user, device, and non-person entity (NPE) identities, attributes, and access rights supp
Implement multi-factor authentication for access to privileged accounts.
Provide a single sign-on capability for [organization-defined].
Remote Access — Separate Device
Accept and electronically verify Personal Identity Verification-compliant credentials.