Search - DIB SCC CyberAssist

Microsoft – Authentication Methods for AD FS 3.5 3.5.2 3.5.3 Identification and Authentication

Read Less

https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-additional-authentication-methods-for-ad-fs

Guide to enable Multi-factor autheitication for Active Directory Federation Services (AD FS) in Windows Server. Also provide guides for use of common Third-party authentication methods (i.e., Duo, Akamai, RSA, etc.,)

Microsoft – Set up Multi-Factor Authentication for M365 3.5 3.5.2 3.5.3 Identification and Authentication

Read Less

https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/set-up-multi-factor-authentication?view=o365-worldwide

Guide for enforcing MFA for Microsoft 365

NIST SP 800-63B Digital Identity Guidelines 3.5 3.5.2 Identification and Authentication

Read Less

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63b.pdf

This NIST Special Publication provides technical requirements for federal agencies implementing digital identity services.

Open Web Application Security Project (OWASP) – Authentication Cheat Sheet 3.5 3.5.2 Identification and Authentication

Read Less

https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Authentication_Cheat_Sheet.md

This cheat sheet from OWASP provides general authentication guidelines.

Open Web Application Security Project (OWASP) – Testing for Account Enumeration and Guessable User Account 3.5.2 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

Read Less

https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/03-Identity_Management_Testing/04-Testing_for_Account_Enumeration_and_Guessable_User_Account

The scope of this test is to verify if it is possible to collect a set of valid usernames by interacting with the authentication mechanism of the application.

RCDevs 3.5 3.5.2 3.5.3 Identification and Authentication

Read Less

https://www.rcdevs.com/products/openotp/

OpenOTP is a phishing-resistant MFA solution.

RSA SecurID Access 3.5 3.5.2 3.5.3 Identification and Authentication

Read Less

https://www.rsa.com/products/securid/

Secure access to your extended enterprise with RSA SecurID Access, the leading multi-factor authentication and identity assurance solution.

SANS – Password Construction Guidelines 3.5 3.5.10 3.5.2 3.5.7 3.5.8 3.5.9 Identification and Authentication

Read Less

https://assets.contentstack.io/v3/assets/blt36c2e63521272fdc/blta5be14c7136a535f/5e9dde89db124263e8afce3d/password_construction_guidelines.pdf

This SANS guideline provides best practices for creating secure passwords.

SANS – Password Protection Policy 3.5 3.5.10 3.5.2 3.5.7 3.5.8 3.5.9 Identification and Authentication

Read Less

https://assets.contentstack.io/v3/assets/blt36c2e63521272fdc/blt56ee6e15d78eb882/5e9ddf05d5a1cb709eee4a22/password_protection_policy.pdf

This is a sample password protection policy from SANS.

SANS Whitepaper – An Overview of Different Authentication Methods and Protocols 3.5 3.5.2 Identification and Authentication

Read Less

https://www.sans.org/white-papers/118/

This SANS whitepaper generalizes several authentication methods and authentication protocols.

SEARCH RESULTS

Microsoft – Authentication Methods for AD FS 3.5 3.5.2 3.5.3 Identification and Authentication

Microsoft – Set up Multi-Factor Authentication for M365 3.5 3.5.2 3.5.3 Identification and Authentication

NIST SP 800-63B Digital Identity Guidelines 3.5 3.5.2 Identification and Authentication

Open Web Application Security Project (OWASP) – Authentication Cheat Sheet 3.5 3.5.2 Identification and Authentication

Open Web Application Security Project (OWASP) – Testing for Account Enumeration and Guessable User Account 3.5.2 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

RCDevs 3.5 3.5.2 3.5.3 Identification and Authentication

RSA SecurID Access 3.5 3.5.2 3.5.3 Identification and Authentication

SANS – Password Construction Guidelines 3.5 3.5.10 3.5.2 3.5.7 3.5.8 3.5.9 Identification and Authentication

SANS – Password Protection Policy 3.5 3.5.10 3.5.2 3.5.7 3.5.8 3.5.9 Identification and Authentication

SANS Whitepaper – An Overview of Different Authentication Methods and Protocols 3.5 3.5.2 Identification and Authentication

Resources

Legal

SEARCH RESULTS

Filter by type

Additional filters

Microsoft – Authentication Methods for AD FS 3.5 3.5.2 3.5.3 Identification and Authentication

Microsoft – Set up Multi-Factor Authentication for M365 3.5 3.5.2 3.5.3 Identification and Authentication

NIST SP 800-63B Digital Identity Guidelines 3.5 3.5.2 Identification and Authentication

Open Web Application Security Project (OWASP) – Authentication Cheat Sheet 3.5 3.5.2 Identification and Authentication

Open Web Application Security Project (OWASP) – Testing for Account Enumeration and Guessable User Account 3.5.2 3.5.7 3.5.8 3.5.9 csc4.2 Identification and Authentication

RCDevs 3.5 3.5.2 3.5.3 Identification and Authentication

RSA SecurID Access 3.5 3.5.2 3.5.3 Identification and Authentication

SANS – Password Construction Guidelines 3.5 3.5.10 3.5.2 3.5.7 3.5.8 3.5.9 Identification and Authentication

SANS – Password Protection Policy 3.5 3.5.10 3.5.2 3.5.7 3.5.8 3.5.9 Identification and Authentication

SANS Whitepaper – An Overview of Different Authentication Methods and Protocols 3.5 3.5.2 Identification and Authentication