IA-13Identity Providers and Authorization Servers

Implementations targeting this control (0)

• No implementations targeting this control yet.

ATT&CK techniques this control mitigates (17)

• T1078 Valid Accounts Stealth, Persistence, Privilege Escalation, Initial Access
• T1078.002 Domain Accounts Stealth, Persistence, Privilege Escalation, Initial Access
• T1078.004 Cloud Accounts Stealth, Persistence, Privilege Escalation, Initial Access
• T1111 Multi-Factor Authentication Interception Credential Access
• T1134 Access Token Manipulation Stealth, Privilege Escalation
• T1134.001 Token Impersonation/Theft Stealth, Privilege Escalation
• T1134.003 Make and Impersonate Token Stealth, Privilege Escalation
• T1134.005 SID-History Injection Stealth, Privilege Escalation
• T1528 Steal Application Access Token Credential Access
• T1556 Modify Authentication Process Defense Impairment, Persistence, Credential Access
• T1556.006 Multi-Factor Authentication Defense Impairment, Persistence, Credential Access
• T1556.007 Hybrid Identity Defense Impairment, Persistence, Credential Access
• T1556.009 Conditional Access Policies Defense Impairment, Persistence, Credential Access
• T1606 Forge Web Credentials Credential Access
• T1606.002 SAML Tokens Credential Access
• T1621 Multi-Factor Authentication Request Generation Credential Access
• T1649 Steal or Forge Authentication Certificates Credential Access

Weaknesses this control addresses (8)AI

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

Top CVEs where this control is the strongest mitigation

Other controls in family IA