VOCE Agent Conformance · ID-05

Third-party identity federation

Are external agent/provider identities accepted only through an explicit federation policy?

Identity & workload trustA3+MajorPermanent control URL
Normative wording

ID-05 · Third-party identity federation

Are external agent/provider identities accepted only through an explicit federation policy?

DomainIdentity & workload trust
Expected ownerSecurity Architecture
Minimum maturityA3+
CriticalityMajor
Target evidence stateDocumented
Expected evidence

Expected evidence

  • Federation policy
  • Partner trust record
Method

How to read this control.

This control belongs to VOCE Agent Conformance. Its identifier and normative wording remain identical across language versions so there is one reference, not three variants. Status depends on dated evidence, not a vendor declaration or aggregate score.

Open Agent Conformance →