The family fixes when users must identify themselves before the TSF mediates any other action for them. Components: FIA_UID.1 Timing of identification (listed actions allowed before identification) and FIA_UID.2 User identification before any action.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.