Sekit CSF · Identity & Access Management · Technical

RCF-0075SSO & federation

All critical applications authenticate through a central identity provider

Mapping at a glance

RCF-0075SSO & federationIdentity & Access Management · Technical

A.5.15Access controlISO/IEC 27001:2022 · Annex A controls A.5.16Identity managementISO/IEC 27001:2022 · Annex A controls A.8.5Secure authenticationISO/IEC 27001:2022 · Annex A controls PR.AA-01Identities and credentials managedNIST CSF 2.0 PR.AA-02Identities proofed and boundNIST CSF 2.0

RCF-0075 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.5.15Access controlenablesAuthenticating critical applications through the central identity provider rather than local accounts is the technical foundation that makes A.5.15's access rules enforceable across the estate.A.5.16Identity managementsupportsAuthenticating critical business applications through the central identity provider means every account there is tied to a known identity, the mapping A.5.16 requires.A.8.5Secure authenticationsupportsSSO federation routes critical applications through the central identity provider instead of local accounts, so authentication strength is set once and applied everywhere A.8.5 covers.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.AA-01Identities and credentials managed PR.AA-02Identities proofed and bound

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE4.3Require multi-factor authentication

This topic through the other lenses

All Identity & Access Management controls

Ask Sekura: “What evidence proves RCF-0075?”

Connect your AI · free MCP

https://sekit.ai/api/mcp/crosswalk

In Claude or ChatGPT, add a custom connector and paste this URL.
Sign in with your email to finish. Free, read-only, no organization required.