Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The application must conform to Federal Identity, Credential, and Access Management (FICAM)-issued profiles.
Description
Discussion Text
FICAM establishes a federated identity framework for the federal government. FICAM provides governmentwide services for common Identity, Credential, and Access Management (ICAM) requirements. The FICAM Trust Framework Solutions (TFS) is the federated identity framework for the U.S. federal government.
The TFS is a process by which Industry Trust Frameworks (the codification of requirements for credentials and their issuance, privacy and security requirements, as well as auditing qualifications and processes) are evaluated and assessed for potential use by the government.
This requirement only applies to applications intended to be accessible to nonfederal government agencies and other partners or nonorganizational (non-DoW) users.
Without conforming to FICAM-issued profiles, the information system may not be interoperable with FICAM-authentication protocols, such as SAML 2.0, OpenID 2.0 or other protocols such as the FICAM backend Attribute Exchange.
This requirement addresses open identity management standards. More information regarding these standards is available here: https://www.idmanagement.gov/fpki/#federal-pki-policies-and-profiles
The TFS is a process by which Industry Trust Frameworks (the codification of requirements for credentials and their issuance, privacy and security requirements, as well as auditing qualifications and processes) are evaluated and assessed for potential use by the government.
This requirement only applies to applications intended to be accessible to nonfederal government agencies and other partners or nonorganizational (non-DoW) users.
Without conforming to FICAM-issued profiles, the information system may not be interoperable with FICAM-authentication protocols, such as SAML 2.0, OpenID 2.0 or other protocols such as the FICAM backend Attribute Exchange.
This requirement addresses open identity management standards. More information regarding these standards is available here: https://www.idmanagement.gov/fpki/#federal-pki-policies-and-profiles
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.