OWASPASVS 5.0 requirement
ASVS-V8.1.4 Authentication and authorization documentation defines how environmental and contextual factors are used in decision-making, in addition to…
- Standard
- OWASP ASVS 5.0
- Chapter
- V8 Authorization
- Section
- V8.1 Authorization Documentation
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that authentication and authorization documentation defines how environmental and contextual factors are used in decision-making, in addition to function-level, data-specific, and field-level authorization. This should include the attributes evaluated, thresholds for risk, and actions taken (e.g., allow, challenge, deny, step-up authentication).