Skip to content

Federated Identity Management

What is Federated Identity Management?

A system enabling users to access multiple applications across different organizations using the same credentials through trust relationships.

Information Security

Frameworks that govern federated identity management

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →CIS Controls v8View framework →

What the standards actually require on federated identity management

Requirements naming federated identity management across 2 standards, quoted from the control text.

MTCS (Singapore)1 control

Cloud user access security. Level 1 (a to e): formal provisioning; protected logs; a default deny-all setting; protection of application services on public networks; and anti-bot controls against automated brute-force attacks.

mtcs-singapore::23.3 · User access security →
New Zealand Information Security Manual (NZISM)1 control

Agencies should assess and decide on the risk posed by centralised access management systems, SSO included, so that integration into systems can be handled safely, including where federated identity management (FIM) is used.

new-zealand-information-security-manual-nzism::16.1.30.C.01 · 16.1.30.C.01 Risk assessment of centralised access management and SSO →

Questions people ask about federated identity management

What is Federated Identity Management?
A system enabling users to access multiple applications across different organizations using the same credentials through trust relationships.
Why is Federated Identity Management important for compliance?
Federated Identity Management is a key concept in Information Security. Understanding federated identity management helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Federated Identity Management?
Federated Identity Management appears in the requirement text of MTCS (Singapore), New Zealand Information Security Manual (NZISM). Across these standards we have identified 2 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Federated Identity Management?
Explore our compliance framework pages to see how federated identity management applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Federated Identity Management applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.