A cloud service that confirms users are who they say they are when signing in to applications, through multi-factor login and single sign-on.
Applications send sign-ins to the cloud service, which checks the user’s identity and second factor. It supports adaptive and passwordless (FIDO2) login, single sign-on and certificate management, according to Fortinet.
Individual logins are how network records become attributable. Knowing which person did something requires each person to have their own account, with shared logins removed.
- Ties activity to a specific person rather than a shared login.
- Adds multi-factor login without a new server.
- Makes it quick to turn off a departed user’s access.
- SAML single sign-on reduces separate passwords.
- Adaptive rules can step up verification for riskier logins.
- FIDO2 supports phishing-resistant sign-in.
| Control | Priority | How this helps |
|---|---|---|
| IA-2Identification and Authentication (Organizational Users) | P1 | Delivers multi-factor authentication for users. |
| IA-5Authenticator Management | P1 | Supports authenticator management. |
| AC-2Account Management | P1 | Centralizes account handling. |
| SA-9External System Services | P2* | This is an external service, so review it as one. |
This is a cloud service. If CJI could reach it, confirm data location, personnel screening and contract terms with your CJIS Systems Officer first.
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table