IA-5(10)

Dynamic Credential Binding

Identification and Authentication (IA)

Baselines

Low · Not includedModerate · Not includedHigh · Not included

Description

Bind identities and authenticators dynamically using the following rules: [assignment].

Discussion

Authentication requires some form of binding between an identity and the authenticator that is used to confirm the identity. In conventional approaches, binding is established by pre-provisioning both the identity and the authenticator to the system. For example, the binding between a username (i.e., identity) and a password (i.e., authenticator) is accomplished by provisioning the identity and authenticator as a pair in the system. New authentication techniques allow the binding between the identity and the authenticator to be implemented external to a system. For example, with smartcard credentials, the identity and authenticator are bound together on the smartcard. Using these credentials, systems can authenticate identities that have not been pre-provisioned, dynamically provisioning the identity after authentication. In these situations, organizations can anticipate the dynamic provisioning of identities. Pre-established trust relationships and mechanisms with appropriate authorities to validate identities and related credentials are essential.

Implementation guidance

No content available.

CSF 2.0 crosswalk

No CSF mappings exist for this control.