|
controlIA-13
Identity Providers and Authorization Servers (IA-13)
Employ identity providers and authorization servers to manage user, device, and non-person entity (NPE) identities, attributes, and access rights supporting authentication and authorization decisions in accordance with [organization-defined] using [organization-defined].
identificationauthenticationidentity
Why These Connect
Maps To4
These are equivalent or closely aligned requirements in other frameworks.
Supports16
These related controls work together — a change to one may affect the others.
Enhances3
These enhancements add specific capabilities or refinements to the base control.
Related Controls(8)
AC-3Access Enforcement (AC-3)
LMH
IA-2Identification and Authentication (Organizational Users) (IA-2)LMH
IA-3Device Identification and Authentication (IA-3)MH
IA-8Identification and Authentication (Non-organizational Users) (IA-8)LMH
IA-9Service Identification and Authentication (IA-9)IA-12Identity Proofing (IA-12)MH
SC-12Cryptographic Key Establishment and Management (SC-12)LMH
SC-13Cryptographic Protection (SC-13)LMH
Cross-Framework Mappings(4)
PR.AA-04PR.AA-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
PR.AA-05PR.AA-05Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
PR.AA-04PR.AA-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
PR.AA-05PR.AA-05Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
Organization-Defined Parameters(2)
Assignmentorganization-defined policy
Assignmentorganization-defined mechanisms