controls:
- id: SRG-APP-000163-CTR-000395
  levels:
  - medium
  title: {{{ full_name }}} must disable identifiers (individuals, groups, roles,
    and devices) after 35 days of inactivity.
  related_rules:
  - idp_is_configured
  - ocp_idp_no_htpasswd
  - kubeadmin_removed
  status: not applicable
  status_justification: |-
    Not Applicable. Applicable to Identity Management Provider and not
    OCP. Only configurable check is to ensure OCP is configured for an
    IDP under SRG-APP-000023-CTR-000055. Verify with IdM service provider
    admins that the IdM meets the requirements.
