Identity Providers and Authorization Servers

Description

Employ identity providers and authorization servers to manage user, device, and non-person entity (NPE) identities, attributes, and access rights supporting authentication and authorization decisions in accordance with [organization-defined parameter] using [organization-defined parameter].

Mapped SPARTA techniques

No techniques mapped to this control.

Cross-framework references

Relationships published by the source frameworks themselves, reproduced here with attribution. They are not SafeMode Space mappings and carry no confidence rating of ours.

Referenced by 2 in NIST Cybersecurity Framework 2.0

PR.AA-04 Identity assertions are protected, conveyed, and verified
PR.AA-05 Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties

Cite as SafeMode Space, nist-80053-rev5 IA-13.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.

# Description

›Mapped SPARTA techniques

›Cross-framework references

Referenced by 2 in NIST Cybersecurity Framework 2.0

Description

Mapped SPARTA techniques

Cross-framework references