IA-02(05) Individual Authentication with Group Authentication
NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
All changes in this version
Title
Individual Authentication with Group Authentication
Control
When shared accounts or authenticators are employed, require users to be individually authenticated before granting access to the shared accounts or resources.
Discussion
Individual authentication prior to shared group authentication mitigates the risk of using group accounts or authenticators.
Assessment objective
IA-02(05) users are required to be individually authenticated before granting access to the shared accounts or resources when shared accounts or authenticators are employed.
STIG rules that implement this control 14
Apple macOS 15 (Sequoia) V1R8
- APPL-15-000090 CAT II The macOS system must disable login to other users' active and locked sessions.
- APPL-15-000100 CAT II The macOS system must disable root login.
- APPL-15-001100 CAT II The macOS system must disable root login for SSH.
Apple macOS 26 (Tahoe) V1R4
- APPL-26-000090 CAT II The macOS system must disable login to other users' active and locked sessions.
- APPL-26-000100 CAT II The macOS system must disable root login.
- APPL-26-001100 CAT II The macOS system must disable root login for SSH.
Application Security and Development V6R5
- APSC-DV-000290 CAT II Shared/group account credentials must be terminated when members leave the group.
- APSC-DV-001610 CAT II The application must ensure users are authenticated with an individual authenticator prior to using a group authenticator.
Canonical Ubuntu 22.04 LTS V2R10
- UBTU-22-411010 CAT II Ubuntu 22.04 LTS must prevent direct login into the root account.
Canonical Ubuntu 24.04 LTS V1R7
- UBTU-24-400110 CAT II Ubuntu 24.04 LTS must prevent direct login to the root account.
Red Hat Enterprise Linux 10 V1R3
- RHEL-10-200621 CAT II RHEL 10 must use the common access card (CAC) smart card driver.
- RHEL-10-700620 CAT II RHEL 10 must not permit direct logins to the root account using remote access via Secure Shell (SSH).
Red Hat Enterprise Linux 9 V2R10
- RHEL-09-255045 CAT II RHEL 9 must not permit direct logons to the root account using remote access via SSH.
- RHEL-09-611160 CAT II RHEL 9 must use the common access card (CAC) smart card driver.