The family fixes the kinds of authentication the TSF supports and the attributes they rest on. Components: FIA_UAU.1 Timing of authentication (what a user may do before authenticating), FIA_UAU.2 User authentication before any action, FIA_UAU.3 Unforgeable authentication, FIA_UAU.4 Single-use authentication mechanisms, FIA_UAU.5 Multiple authentication mechanisms (and the rules for choosing between them), FIA_UAU.6 Re-authenticating (under listed conditions) and FIA_UAU.7 Protected authentication feedback.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.