IA-05(10) Dynamic Credential Binding
All changes in this version
Title
Dynamic Credential Binding
Control
Bind identities and authenticators dynamically using the following rules: [Assignment: binding rules].
Discussion
Authentication requires some form of binding between an identity and the authenticator that is used to confirm the identity. In conventional approaches, binding is established by pre-provisioning both the identity and the authenticator to the system. For example, the binding between a username (i.e., identity) and a password (i.e., authenticator) is accomplished by provisioning the identity and authenticator as a pair in the system. New authentication techniques allow the binding between the identity and the authenticator to be implemented external to a system. For example, with smartcard credentials, the identity and authenticator are bound together on the smartcard. Using these credentials, systems can authenticate identities that have not been pre-provisioned, dynamically provisioning the identity after authentication. In these situations, organizations can anticipate the dynamic provisioning of identities. Pre-established trust relationships and mechanisms with appropriate authorities to validate identities and related credentials are essential.
Parameters
ia-05.10_odp: binding rules
Related controls
au-16, ia-5
Assessment objective
IA-05(10) identities and authenticators are dynamically bound using [Assignment: binding rules].
STIG rules that implement this control 0
No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).