Accept externally-proofed identities at [Assignment: organization-defined identity assurance level].
|
|
| Control Identifier | IA-12(6) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | To limit unnecessary re-proofing of identities, particularly of non-PIV users, organizations accept proofing conducted at a commensurate level of assurance by other agencies or organizations. Proofing is consistent with organizational security policy and the identity assurance level appropriate for the system, application, or information accessed. Accepting externally-proofed identities is a fundamental component of managing federated identities across agencies and organizations. |
| Related Controls | IA-3, IA-4, IA-5, IA-8. |