A user's identity stays undisclosed while they use a resource or service; the identity of the subject acting for them is not what is protected. Components: FPR_ANO.1 Anonymity (protection against a listed set of users or subjects) and FPR_ANO.2 Anonymity without soliciting information (the service is given without the TSF asking for the real name).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.