Identity Federation
What is Identity Federation?
A system of trust between identity providers and service providers that allows users to authenticate once and access multiple systems across different organisations. Federation protocols include SAML, OAuth, and OpenID Connect.
Terms that appear alongside identity federation
Each of these is named in at least one of the same controls as identity federation. The number is how many controls name both.
- authorisation 3 shared controls
- authentication 3 shared controls
- just in time access 2 shared controls
- multi factor authentication 2 shared controls
- iso 27001 2 shared controls
- governance 2 shared controls
- access management 2 shared controls
- nist 2 shared controls
Frameworks that govern identity federation
What the standards actually require on identity federation
Requirements naming identity federation across 5 standards, quoted from the control text.
Provide enterprise identity federation and standardized user credentialing across DoD components.
DODZT-1.5 · Identity Federation and User Credentialing →Replace long-lived IAM access keys with short-lived credentials issued via IAM roles, IAM Identity Center, STS or workload identity federation.
SEC02-BP02 · Use temporary credentials →Kuwait NCF Protect function (Access). Access Control and Identity Management aligned with NIST SP 800-53 AC family + ISO 27001 A.9 + Zero Trust principles.
KNCF-Protect-Access-Control-IAM-Privileged-MFA-Zero-Trust-Identity-Lifecycle-IAG-PAM · Kuwait NCF Protect + Access Control + IAM + Privileged + MFA + Zero Trust + Identity Lifecycle →Apply NIST SP 800-146 Chapter 8 deployment model operational recommendations. For Public Cloud (Section 8.1): assess provider transparency, security architecture, tenancy isolation, breach history, jurisdiction of operation.
NISTSP146-5 · Deployment Model Recommendations (Public, Private, Community, Hybrid) →Implement identity and access management + authentication + privileged access per Oman framework. Apply role-based access + multi-factor authentication for privileged + remote + and administrative access + just-in-time access + session recording + credential v...
OMANCS-3 · Identity and Access Management, Authentication, Privileged Access →Questions people ask about identity federation
What is Identity Federation?
Why is Identity Federation important for compliance?
Which compliance frameworks address Identity Federation?
Where can I learn more about Identity Federation?
See how Identity Federation applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.