4.3 Identity Management

4.3.1 Role Definitions

4.3.2 User Registration Process

4.3.3 Account Provisioning Process

4.3.4 Account Enumeration and Guessable User Account

4.3.5 Weak or Unenforced Username Policy