---

id: "IA-05(15)" title: "GSA-approved Products and Services" family: "IA" family_name: "Identification and Authentication" sort_id: "ia-05.15" priority: "P1" implementation_level: "organization" parent: "IA-05" enhancement: True

---

Statement

Use only General Services Administration-approved products and services for identity, credential, and access management.

Guidance

General Services Administration (GSA)-approved products and services are products and services that have been approved through the GSA conformance program, where applicable, and posted to the GSA Approved Products List. GSA provides guidance for teams to design and build functional and secure systems that comply with Federal Identity, Credential, and Access Management (FICAM) policies, technologies, and implementation patterns.

Assessment Objective

only General Services Administration-approved products and services are used for identity, credential, and access management.

Identification and authentication policy

procedures addressing identifier management

system security plan

system design documentation

mechanisms providing dynamic binding of identifiers and authenticators

system configuration settings and associated documentation

system audit records

other relevant documents or records

Organizational personnel with identification and authentication management responsibilities

organizational personnel with information security responsibilities

system/network administrators

Mechanisms supporting and/or implementing account management capability

mechanisms supporting and/or implementing identification and authentication management capabilities for the system