STIGUI
V-260010CAT I — High severitySV-260010r948991_rule

The Enterprise Voice, Video, and Messaging Session Manager must be configured to use an organizational-level user account management system.

Rule version SRG-NET-000138-VVSM-00102 · STIG v1 · 2026-05-23

Discussion

To effectively manage user accounts, organizational level systems such as Lightweight Directory Access Protocol (LDAP) or Active Directory (AD) are used to create and manage user credentials that can be used across the organization.

This reduces the need for separate user account databases across systems, that can create orphaned account issues, and the need to remember different credentials for each system.

When user access is no longer authorized, an organizational level system can simultaneously revoke access to all systems.

Check

Verify the Enterprise Voice, Video, and Messaging Session Manager is configured to use an organizational level user account management system.

If the Enterprise Voice, Video, and Messaging Session Manager is not configured to use an organizational level user account management system, then is a finding.

Fix

Configure the Enterprise Voice, Video, and Messaging Session Manager to use an organizational level user account management system.

Identifiers

Group ID
V-260010
Group title
SRG-NET-000138
Rule ID
SV-260010r948991_rule
Check ID
C-63741r948989_chk
Fix ID
F-63648r948990_fix