Assess
Migration Control Library
Structured library of Directory migration controls. Each control traces to tests, findings and evidence.
Pass126
Action required13
Critical5
Not assessed5
Exception0
9 of 9
| Method | Evidence | |||||||
|---|---|---|---|---|---|---|---|---|
| JWKS-001 | RFC 7517 JWKS content type supported | JWKS | Medium | 2 | Architecture review | ACTION REQUIRED | 1 | 10 Sept, 07:20 |
| JWKS-002 | Signing keys selected dynamically using kid | JWKS | Critical | 1 | Configuration scan | CRITICAL | 1 | 11 Sept, 08:20 |
| JWKS-003 | JWKS cache refresh on rotation | JWKS | Medium | 2 | Certificate inspection | PASS | 1 | 10 Sept, 15:05 |
| JWKS-004 | JWKS endpoint TLS validated | JWKS | Low | 2 | Engineer attestation | ACTION REQUIRED | — | 11 Sept, 16:05 |
| JWKS-005 | Unknown kid triggers refetch | JWKS | Low | 2 | Architecture review | PASS | — | 12 Sept, 17:05 |
| JWKS-006 | JWKS size limits | JWKS | Low | 1 | Configuration scan | PASS | 1 | 08 Sept, 18:05 |
| JWKS-007 | JWKS negative caching | JWKS | High | 2 | API probe | PASS | 1 | 09 Sept, 10:05 |
| JWKS-008 | JWKS fetch timeout | JWKS | Low | 2 | Static analysis | NOT ASSESSED | — | — |
| JWKS-009 | JWKS x5c chain validated | JWKS | Low | 2 | Network probe | PASS | 1 | 11 Sept, 12:05 |