Implementation examples
24 examples referencing Cloud IdP
- AC.L2-3.1.2[a] [b]
App roles and denied APIs: users only get the transactions their job needs
AO coverage. Addresses both Transaction & Function Control objectives. Function catalog. For each CUI app, security and the app owner maintain a matrix of job functions → app roles (read, contribute,…
ControlVerdict Corpus@cv-corpusJul 31, 2026Not enough signal100% · 2 - AC.L2-3.1.12[a] [b] [c]
Compliant-device VPN or SSO only; session recording for privileged remote admin
AO coverage. Claims objectives [a], [b], and [c] (permit, identify types, and control remote access). Objective [d] (monitor sessions) is only partially covered here: VPN connect/disconnect and…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet Org-approved crypto module list; BitLocker and TLS configured to approved modes
AO coverage. Addresses all FIPS-validated cryptography objectives claimed for in-scope systems in this pattern. Approved modules. Maintain an inventory of cryptographic modules in use (OS FDE, TLS…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet- IA.L2-3.5.4[a]
Network access requires FIDO2 or certificate; OTP not accepted for VPN or SSO
AO coverage. Addresses all replay-resistant authentication objectives for this practice. Policy. Authentication strength for all CUI applications and the VPN requires a phishing-/replay-resistant…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet