NIST 800-53 rev.5/Identification and Authentication/391 of 1011
IA-13(03)Identity Providers And Authorization Servers | Token Management
Control family: Identification and Authentication
Control description
In accordance with [Assignment: organization-defined identification and authentication policy], assertions and access tokens are:
a. generated;
b. issued;
c. refreshed;
d. revoked;
e. time-restricted; and
f. audience-restricted.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.