← Back to VMware vRealize Automation 7.x vIDM Security Technical Implementation Guide

V-240970

CAT II (Medium)

vIDM must be configured correctly for the site enterprise user management system.

Rule ID

SV-240970r879589_rule

STIG

VMware vRealize Automation 7.x vIDM Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000764

Discussion

To assure accountability and prevent unauthorized access, application server users must be uniquely identified and authenticated. This is typically accomplished via the use of a user store which is either local (OS-based) or centralized (LDAP) in nature. To ensure support to the enterprise, the authentication must utilize an enterprise solution.

Check Content

Interview the ISSO. Obtain the correct configuration for the site's Directory services.

In a browser, log in with Tenant admin privileges and navigate to the Administration page.

Select Directories Management >> Directories.

Click on the configured Directory to review the configuration. 

If the Directory service is not configured correctly, this is a finding.

Fix Text

Interview the ISSO. Obtain the correct configuration for the site's Directory services.

In a browser, log in with Tenant admin privileges, and navigate to the Administration page.

Select Directories Management >> Directories.

Click on the configured Directory to edit the configuration in accordance with the instructions provided by the ISSO.