NIST 800-53 rev.5/Identification and Authentication/374 of 1011
IA-08 (02)Identification and Authentication (non-organizational Users) | Acceptance of External Authenticators
Control family: Identification and Authentication
Control description
(a) Accept only external authenticators that are NIST-compliant; and
(b) Document and maintain a list of accepted external authenticators.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.