IA-13: Identity Providers and Authorization Servers

Not Required by DIR or TAMUS (Discretionary) 

Review Date:  07/10/2024

  • Tarleton State University (Tarleton) employs identity providers and authorization servers to manage user, device, and non-person entity (NPE) identities, attributes, and access rights supporting authentication and authorization decisions. 
    • Cryptographic keys that protect access tokens are generated, managed, and protected from disclosure and misuse.  
    • The source and integrity of identity assertions and access tokens are verified before granting access to system and information resources.  

References/Additional Resources

None.  See any applicable internal procedures.