FedRAMP Controls / IA
IA-8 Identification and Authentication (Non-organizational Users)
Family IA
Baselines moderate
Mapped KSIs 1
Control statement
Uniquely identify and authenticate non-organizational users or processes acting on behalf of non-organizational users.
Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is
preserved in the catalog database.
Covered by these Key Security Indicators
| KSI | Title | Category |
|---|---|---|
| KSI-IAM-01 | Phishing-Resistant MFA Enforce multi-factor authentication (MFA) using methods that are difficult to intercept or impersonate (phishing-resistant MFA) for all user authentication. | Identity and Access Management |