BaselineWatch
Desk

IA-05(10) Dynamic Credential Binding

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged IA part of IA-5

Title

Dynamic Credential Binding

Control

Bind identities and authenticators dynamically using the following rules: [Assignment: binding rules].

Discussion

Authentication requires some form of binding between an identity and the authenticator that is used to confirm the identity. In conventional approaches, binding is established by pre-provisioning both the identity and the authenticator to the system. For example, the binding between a username (i.e., identity) and a password (i.e., authenticator) is accomplished by provisioning the identity and authenticator as a pair in the system. New authentication techniques allow the binding between the identity and the authenticator to be implemented external to a system. For example, with smartcard credentials, the identity and authenticator are bound together on the smartcard. Using these credentials, systems can authenticate identities that have not been pre-provisioned, dynamically provisioning the identity after authentication. In these situations, organizations can anticipate the dynamic provisioning of identities. Pre-established trust relationships and mechanisms with appropriate authorities to validate identities and related credentials are essential.

Parameters

ia-05.10_odp: binding rules

Related controls

au-16, ia-5

Assessment objective

IA-05(10) identities and authenticators are dynamically bound using [Assignment: binding rules].

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).