OWASPASVS 5.0 requirement
ASVS-V7.1.3 All systems that create and manage user sessions as part of a federated identity management ecosystem (such as sso systems) are documented…
- Standard
- OWASP ASVS 5.0
- Chapter
- V7 Session Management
- Section
- V7.1 Session Management Documentation
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that all systems that create and manage user sessions as part of a federated identity management ecosystem (such as SSO systems) are documented along with controls to coordinate session lifetimes, termination, and any other conditions that require re-authentication.