Assess
Migration Control Library
Structured library of Directory migration controls. Each control traces to tests, findings and evidence.
Pass126
Action required13
Critical5
Not assessed5
Exception0
11 of 11
| Method | Evidence | |||||||
|---|---|---|---|---|---|---|---|---|
| OAUTH-001 | New token endpoint configured | OAuth & Authentication | High | 2 | Static analysis | PASS | 1 | 12 Sept, 03:20 |
| OAUTH-002 | OAuth audience uses new issuer | OAuth & Authentication | Critical | 1 | Network probe | CRITICAL | 2 | 10 Sept, 04:20 |
| OAUTH-003 | Directory OAuth scopes migrated | OAuth & Authentication | Medium | 1 | Certificate inspection | ACTION REQUIRED | — | 11 Sept, 05:20 |
| OAUTH-004 | Client credentials flow uses private_key_jwt | OAuth & Authentication | High | 2 | Static analysis | PASS | 1 | 12 Sept, 10:05 |
| OAUTH-005 | Token cache TTL within limits | OAuth & Authentication | Low | 2 | Network probe | PASS | — | 08 Sept, 11:05 |
| OAUTH-006 | Token endpoint mTLS bound | OAuth & Authentication | Low | 2 | Certificate inspection | NOT ASSESSED | — | — |
| OAUTH-007 | Refresh of Directory tokens automated | OAuth & Authentication | Medium | 2 | Engineer attestation | PASS | 1 | 10 Sept, 13:05 |
| OAUTH-008 | OAuth error mapping | OAuth & Authentication | Low | 2 | Architecture review | PASS | 1 | 11 Sept, 14:05 |
| OAUTH-009 | Clock skew tolerance configured | OAuth & Authentication | Low | 1 | Configuration scan | PASS | 1 | 12 Sept, 15:05 |
| OAUTH-010 | Token introspection migrated | OAuth & Authentication | Low | 2 | API probe | PASS | 1 | 08 Sept, 16:05 |
| OAUTH-011 | OAuth logging redacted | OAuth & Authentication | Medium | 2 | Static analysis | PASS | 1 | 09 Sept, 17:05 |