CIS Okta IDaaS STIG Benchmark v1.0.0

See CIS benchmark recommendation OKTA-APP-000560

See CIS benchmark recommendation OKTA-APP-000570

Checks that at least one Log Streaming connection is configured and active.

Checks Global Session Policy rule priority 1 idle timeout.

See CIS benchmark recommendation OKTA-APP-000025

See CIS benchmark recommendation OKTA-APP-000090

Checks password lockout threshold for active password policies.

See CIS benchmark recommendation OKTA-APP-000180

See CIS benchmark recommendation OKTA-APP-000190

See CIS benchmark recommendation OKTA-APP-000200

Checks password minimum length for active password policies.

Checks password uppercase requirement for active password policies.

Checks password lowercase requirement for active password policies.

Checks password numeric requirement for active password policies.

Checks password symbol requirement for active password policies.

Checks password minimum age for active password policies.

Checks password maximum age for active password policies.

Checks Global Session Policy rule priority 1 session lifetime.

Checks that the Smart Card Authenticator is present and active.

See CIS benchmark recommendation OKTA-APP-001700

Checks Global Session Policy rule priority 1 persistent cookie setting.

See CIS benchmark recommendation OKTA-APP-001920

Checks common/compromised password protections for active password policies.

Checks password reuse history for active password policies.