Rule version SRG-NET-000138-VVSM-00101 · STIG v1 · 2026-05-23
To ensure accountability and prevent unauthenticated access, organizational users must be uniquely identified and authenticated to prevent potential misuse and compromise of the system.
Sharing of accounts prevents accountability and nonrepudiation. Organizational users must be uniquely identified and authenticated for all accesses.
Verify the Enterprise Voice, Video, and Messaging Session Manager uniquely identifies all users.
If the Enterprise Voice, Video, and Messaging Session Manager does not uniquely identify all users, then is a finding.
Configure the Enterprise Voice, Video, and Messaging Session Manager to uniquely identify all users.