controls:
    -   id: SRG-OS-000068-GPOS-00036
        levels:
            - medium
        title: {{{ full_name }}} must map the authenticated identity to the user or group
            account for PKI-based authentication.
        rules:
            - sssd_enable_certmap
        status: automated
