FedRAMP Controls / IA

IA-8 Identification and Authentication (Non-organizational Users)

Family IA
Baselines moderate
Mapped KSIs 1

Control statement

Uniquely identify and authenticate non-organizational users or processes acting on behalf of non-organizational users.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators

KSITitleCategory
KSI-IAM-01Phishing-Resistant MFA
Enforce multi-factor authentication (MFA) using methods that are difficult to intercept or impersonate (phishing-resistant MFA) for all user authentication.
Identity and Access Management