The application server must accept Federal Identity, Credential, and Access Management (FICAM)-approved third-party credentials.

Severity	Group ID	Group Title	Version	Rule ID	Date	STIG Version
medium	V-204808	SRG-APP-000404	SRG-APP-000404-AS-000249	SV-204808r981695_rule	2025-02-11	4

Description
Access may be denied to legitimate users if FICAM-approved third-party credentials are not accepted. This requirement typically applies to organizational information systems that are accessible to non-federal government agencies and other partners. This allows federal government relying parties to trust such credentials at their approved assurance levels. Third-party credentials are those credentials issued by nonfederal government entities approved by the FICAM Trust Framework Solutions initiative.

Description

Access may be denied to legitimate users if FICAM-approved third-party credentials are not accepted. This requirement typically applies to organizational information systems that are accessible to non-federal government agencies and other partners. This allows federal government relying parties to trust such credentials at their approved assurance levels. Third-party credentials are those credentials issued by nonfederal government entities approved by the FICAM Trust Framework Solutions initiative.

ℹ️ Check
Review the application server documentation and configuration to determine if the application server accepts FICAM-approved third-party credentials. If the application server does not accept FICAM-approved third-party credentials, this is a finding.

✔️ Fix
Configure the application server to accept FICAM-approved third-party credentials.