Federation - Use of Assertion Audience Restriction, v1.0

All assertions must include audience restrictions so that RPs are able to verify they are an intended recipient of the assertion.

Assessment Step

1
Assertion Audience Restrictions (AssertionAudienceRestrictions)
Do all assertions contain audience restrictions?
Artifact
A1
Provide evidence (e.g. policies, operational samples) that all assertions include audience restrictions.

Conformance Criteria (1)

C1
Assertions SHALL use audience restriction techniques to allow an RP to recognize whether or not it is the intended target of an issued assertion.
Citation
NIST SP 800-63C
Section 6.2.4