Secure Controls Framework

1,534 controls across 34 domains

Source: SCF 2026.2About SCF
securecontrolsframework.com
Back to catalog
IAC-03.2IACIdentification & Authentication

Acceptance of Third-Party Credentials

Description

Automated mechanisms exist to accept Federal Identity, Credential and Access Management (FICAM)-approved third-party credentials.

Cross-Mappings

16 paths across 3 frameworks
NIST 800-531 mapping
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
CCI3 mappings
CCI-002011
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004083
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-004084
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
STIG7 mappings
SV-204808r981695_ruleThe application server must accept Federal Identity, Credential, and Access Management (FICAM)-approved third-party credentials.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 4 · disa_xccdf · related
SV-205576r982321_ruleThe Mainframe Product must accept Federal Identity, Credential, and Access Management (FICAM)-approved third-party credentials.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 3 · disa_xccdf · related
SV-222559r1015708_ruleThe application must accept Federal Identity, Credential, and Access Management (FICAM)-approved third-party credentials.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 6 · disa_xccdf · related
SV-256846r890148_ruleCompliance Guardian must accept FICAM-approved third-party credentials.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · V1R1 · disa_xccdf · related
SV-263657r982559_ruleThe operating system must accept only external credentials that are NIST-compliant.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 3 · disa_xccdf · related
SV-264322r984281_ruleThe VMM must accept only external credentials that are NIST-compliant.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · 2 · disa_xccdf · related
SV-279443r1192354_ruleNutanix AOS must accept Federal Identity, Credential, and Access Management (FICAM)-approved third-party credentials.
1.00
  • Secure Controls Framework · 2026.2 · scf_strm · equivalent
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • DISA · V1R1 · disa_xccdf · related

Control mappings provided by the Secure Controls Framework (SCF).

SCF

Powered by the Secure Controls Framework

The control catalog, cross-mappings, and STRM relationship data shown here are provided by the Secure Controls Framework (SCF), 2026.2. Every mapping is credited to SCF as the methodology, with the SCF reference and version stored alongside it.

© SCF Council, LLC. Secure Controls Framework content is free and shown here with attribution. securecontrolsframework.com · About SCF on STIGViewer