documentation_complete: true

title: |-
    Ensure Default System Java Authentication and Authorization
    Service Is In Use

description: |-
    Using the default system JAAS configuration ensures
    user identification and authentication are performed by JBoss Fuse.

rationale: |-
    Using an administrator specified JAAS configuration enables a more
    rigorous security posture.

severity: medium

identifiers:
    cce: ""

references:
    cis: ""
    disa: ""
    nist: CM-6

ocil_clause: 'JAAS is not configured'
