48 CFR § 1252.239-81 - Cloud Identification and Authentication (Organizational Users) Multi-Factor Authentication.

As prescribed in 1239.7204(f), insert the following clause:

Cloud Identification and Authentication (Organizational Users) Multi-Factor Authentication (NOV 2022)

The Contractor shall support a secure, multi-factor method of remote authentication and authorization to identified Government Administrators that will allow Government-designated personnel the ability to perform management duties on the system. The Contractor shall support multi-factor authentication in accordance with National Institute of Standards and Technology (NIST) Federal Information Processing Standards (FIPS) Publication (PUB) Number 201-2, Personal Identity Verification (PIV) of Federal Employees and Contractors, and OMB implementation guidance for personal identity verification.

(End of clause)