OpenControls Logo

STIG Viewer

STIGViewer Support

The operating system must accept only external credentials that are NIST-compliant.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-263657SRG-OS-000745-GPOS-00210SV-263657r982559_ruleCCI-004083medium
Description
Acceptance of only NIST-compliant external authenticators applies to organizational systems that are accessible to the public (e.g., public-facing websites). External authenticators are issued by nonfederal government entities and are compliant with [SP 800-63B]. Approved external authenticators meet or exceed the minimum federal government-wide technical, security, privacy, and organizational maturity requirements. Meeting or exceeding federal requirements allows federal government relying parties to trust external authenticators in connection with an authentication transaction at a specified authenticator assurance level.
STIGDate
General Purpose Operating System Security Requirements Guide2024-12-04

Related Frameworks

1 mapping across 3 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

IAC-03.2Acceptance of Third-Party Credentials
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (41) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-17(10)Authenticate Remote Commands
1.00
AC-2(1)Automated System Account Management
1.00
AC-2(11)Usage Conditions
1.00
AC-2(2)Automated Temporary and Emergency Account Management
1.00
AC-2(3)Disable Accounts
1.00
AC-2(4)Automated Audit Actions
1.00
AC-3Access Enforcement
1.00
AC-4(17)Domain Authentication
1.00
AC-7Unsuccessful Logon Attempts
1.00
AU-10Non-repudiation
1.00

+31 more (top 10 by confidence shown)

CCI1 mapping
CCI-004083
1.00

Details

Check Text (C-263657r982559_chk)

Verify the operating system is configured to accept only external credentials that are NIST-compliant. If the operating system is not configured to accept only external credentials that are NIST-compliant, this is a finding.

Fix Text (F-67478r982240_fix)

Configure the operating system to accept only external credentials that are NIST-compliant.