800-53|IA-2(5)

Title

GROUP AUTHENTICATION

Description

The organization requires individuals to be authenticated with an individual authenticator when a group authenticator is employed.

Supplemental

Requiring individuals to use individual authenticators as a second level of authentication helps organizations to mitigate the risk of using group authenticators.

Reference Item Details

Category: IDENTIFICATION AND AUTHENTICATION

Parent Title: IDENTIFICATION AND AUTHENTICATION (ORGANIZATIONAL USERS)

Family: IDENTIFICATION AND AUTHENTICATION

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.6 VCSA-80-000059VMwareCIS VMware vSphere 8.0 vCenter STIG v1.0.0 CAT II
1.23 APPL-14-000090UnixCIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II
1.24 APPL-14-000100UnixCIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II
1.52 APPL-14-001100UnixCIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II
1.56 AZLX-23-001240UnixCIS Amazon Linux 2023 STIG v1.0.0 CAT II
1.72 SLES-15-020040UnixCIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT II
1.74 UBTU-22-411010UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.81 UBTU-24-400110UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.91 SOL-11.1-040230UnixCIS Solaris 11 SPARC STIG v1.0.0 CAT II
1.91 SOL-11.1-040230UnixCIS Solaris 11 X86 STIG v1.0.0 CAT II
1.98 OL08-00-010550UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.210 RHEL-09-255045UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.270 ALMA-09-034780UnixCIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II
1.270 OL09-00-002345UnixCIS Oracle Linux 9 STIG v1.0.0 CAT II
1.334 RHEL-10-700620UnixCIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT II
1.339 RHEL-09-611160UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
5.1.20 Ensure sshd PermitRootLogin is disabledUnixCIS Rocky Linux 10 v1.0.0 L1 Workstation
5.1.20 Ensure sshd PermitRootLogin is disabledUnixCIS Rocky Linux 10 v1.0.0 L1 Server
5.1.21 Ensure sshd PermitRootLogin is disabledUnixCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 Server
5.1.21 Ensure sshd PermitRootLogin is disabledUnixCIS Red Hat Enterprise Linux 8 STIG v2.0.0 STIG
5.1.21 Ensure sshd PermitRootLogin is disabledUnixCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 Workstation
AIX7-00-001011 - Direct logins to the AIX system must not be permitted to shared accounts, default accounts, application accounts, and utility accounts.UnixDISA IBM AIX 7.x STIG v3r2
ALMA-09-034780 - AlmaLinux OS 9 must not permit direct logons to the root account using remote access via SSH.UnixDISA Cloud Linux AlmaLinux OS 9 STIG v1r6
AOSX-13-000565 - The macOS system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-14-001100 - The macOS system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-15-001100 - The macOS system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator.UnixDISA STIG Apple Mac OSX 10.15 v1r10
APPL-11-001100 - The macOS system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator.UnixDISA STIG Apple macOS 11 v1r5
APPL-11-001100 - The macOS system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator.UnixDISA STIG Apple macOS 11 v1r8
APPL-12-001100 - The macOS system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator.UnixDISA STIG Apple macOS 12 v1r9
APPL-13-001100 - The macOS system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator.UnixDISA STIG Apple macOS 13 v1r5
APPL-14-000090 - The macOS system must disable logon to other user's active and locked sessions.UnixDISA Apple macOS 14 Sonoma STIG v2r4
APPL-14-000100 - The macOS system must disable root logon.UnixDISA Apple macOS 14 Sonoma STIG v2r4
APPL-14-001100 - The macOS system must disable root logon for SSH.UnixDISA Apple macOS 14 Sonoma STIG v2r4
ARBA-ND-000247 - AOS must be configured to use DOD public key infrastructure (PKI) as multifactor authentication (MFA) for interactive logins.ArubaOSDISA HPE Aruba Networking AOS NDM STIG v1r1
AZLX-23-001240 - Amazon Linux 2023 must not permit direct logons to the root account using remote access via SSH.UnixDISA Amazon Linux 2023 STIG v1r3
Big Sur - Disable Login to Other User's Active and Locked SessionsUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Disable Login to Other User's Active and Locked SessionsUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Disable Login to Other User's Active and Locked SessionsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Disable Login to Other User's Active and Locked SessionsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
Big Sur - Disable Login to Other User's Active and Locked SessionsUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Disable Login to Other User's Active and Locked SessionsUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Disable Login to Other User's Active and Locked SessionsUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Disable Login to Other User's Active and Locked SessionsUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Disable Login to Other User's Active and Locked SessionsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Disable Root LoginUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Disable Root LoginUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
Big Sur - Disable Root LoginUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Disable Root LoginUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Disable Root LoginUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Disable Root LoginUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253