The application server must conform to Federal Identity, Credential, and Access Management (FICAM)-issued profiles.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-204809 | SRG-APP-000405 | SRG-APP-000405-AS-000250 | SV-204809r981696_rule | 2025-02-11 | 4 |
| Description |
|---|
| Without conforming to FICAM-issued profiles, the information system may not be interoperable with FICAM-authentication protocols, such as SAML 2.0 and OpenID 2.0. This requirement addresses open identity management standards. |
| ℹ️ Check |
|---|
| Review the application server documentation and configuration to determine if the application server conforms to FICAM-issued profiles. If the application server does not conform to FICAM-issued profiles, this is a finding. |
| ✔️ Fix |
|---|
| Configure the application server to conform to FICAM-issued profiles. |