V-204808
Application Server Security Requirements Guide
Title
The application server must accept Federal Identity, Credential, and Access Management (FICAM)-approved third-party credentials.
Description
<VulnDiscussion>Access may be denied to legitimate users if FICAM-approved third-party credentials are not accepted. This requirement typically applies to organizational information systems that are accessible to non-federal government agencies and other partners. This allows federal government relying parties to trust such credentials at their approved assurance levels. Third-party credentials are those credentials issued by nonfederal government entities approved by the FICAM Trust Framework...
Fix Text (Documentation Requirement)
Configure the application server to accept FICAM-approved third-party credentials.