← Back to Baseline

MB-R237

HUMAN VERIFICATION REQUIRED ASVS 7.6.1 Federated lifetime enforcement (when federated_identity is used)

MB-C16 ASVS Level 2 Contextual Human Assurance High

Session lifetime and termination between Relying Parties (RPs) and Identity Providers (IdPs) behave as documented, requiring re-authentication as necessary such as when the maximum time between IdP authentication events is reached.