Regulations last checked for updates: May 03, 2025

Title 48 - Federal Acquisition Regulations System last revised: Oct 18, 2025
1252.239-81 - 1252.239-81 Cloud Identification and Authentication (Organizational Users) Multi-Factor Authentication.

As prescribed in 1239.7204(f), insert the following clause:

Cloud Identification and Authentication (Organizational Users) Multi-Factor Authentication (NOV 2022)

The Contractor shall support a secure, multi-factor method of remote authentication and authorization to identified Government Administrators that will allow Government-designated personnel the ability to perform management duties on the system. The Contractor shall support multi-factor authentication in accordance with National Institute of Standards and Technology (NIST) Federal Information Processing Standards (FIPS) Publication (PUB) Number 201-2, Personal Identity Verification (PIV) of Federal Employees and Contractors, and OMB implementation guidance for personal identity verification.

(End of clause)
authority: 5 U.S.C. 301; 41 U.S.C. 1121(c)(3); 41 U.S.C. 1702; and 48 CFR 1.301 through 1.304
source: 87 FR 61159, Oct. 7, 2022, unless otherwise noted.
cite as: 48 CFR 1252.239-81