5.2 Design identification and authentication Strategy (e.g., people, devices, and services)

• 5.2.1 Groups and Roles
• 5.2.2 Authentication, Authorization and Accounting (AAA) (e.g., MFA, password-less authentication)
• 5.2.3 Session management
• 5.2.4 Registration, proofing, and establishment of identity
• 5.2.5 Federated Identity Management (FIM)
• 5.2.6 Credential Management Systems (e.g. Password vault)
• 5.2.7 Single Sign-on (SSO)
• 5.2.8 Just-in-Time (JIT)