Skip to content

Oracle WebLogic must be integrated with a tool to implement multi-factor user authentication.

An XCCDF Rule

Description

Multifactor authentication is defined as: using two or more factors to achieve authentication. Factors include: (i) something a user knows (e.g., password/PIN); (ii) something a user has (e.g., cryptographic identification device, token); or (iii) something a user is (e.g., biometric). A CAC meets this definition. Implementing a tool, such as Oracle Access Manager, will implement multi-factor authentication to the application server and tie the authenticated user to a user account (i.e. roles and privileges) assigned to the authenticated user.

ID
SV-235999r628775_rule
Version
WBLC-10-000272
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Install a tool, such as Oracle Access Manager, to handle multi-factor authentication of users.