Cloud service customer: check that the way the provider issues and manages secret authentication information such as passwords satisfies the customer's own requirements. Cloud service provider: provide information on its procedures for managing the customer's secret authentication information, including how such information is allocated and how users are authenticated. Other information: the customer can use its own or a third-party identity and access management technology to manage secret authentication information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.