cisagov / ScubaGoggles

SCuBA Secure Configuration Baselines and assessment tool for Google Workspace
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
164 stars 22 forks source link

Implement code for new common controls 3.2 #494

Open adhilto opened 3 weeks ago

adhilto commented 3 weeks ago

💡 Summary

Implement code for new common controls 3.2, "Post-SSO verification SHOULD be enabled for users signing in using other SSO profiles."

Motivation and context

PR #493 added the baseline change, but did not implement the actual code for it.

Implementation notes

SsoPolicyProto sso_profile_challenge_selection_behavior appears to the appropriate log event

Acceptance criteria