--- title: Navigating SAMA, ADGM & DFSA Requirements with Teleport description: Coalfire and Teleport outline how cloud service providers entering Saudi Arabia and UAE financial markets can meet SAMA's Cyber Security Framework, ADGM's... canonical: https://daily.dev/posts/navigating-sama-adgm-dfsa-requirements-with-teleport-tdijqxjvy twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Navigating SAMA, ADGM & DFSA Requirements with Teleport | daily.dev og:description: Coalfire and Teleport outline how cloud service providers entering Saudi Arabia and UAE financial markets can meet SAMA's Cyber Security Framework, ADGM's... og:url: https://daily.dev/posts/navigating-sama-adgm-dfsa-requirements-with-teleport-tdijqxjvy og:image: https://api.daily.dev/og/posts/TdiJQxjVY.png og:image:alt: Navigating SAMA, ADGM & DFSA Requirements with Teleport og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Navigating SAMA, ADGM & DFSA Requirements with Teleport **[Teleport](https://daily.dev/sources/teleport)** · 8 min read · 0 upvotes · 0 comments ## Summary Coalfire and Teleport outline how cloud service providers entering Saudi Arabia and UAE financial markets can meet SAMA's Cyber Security Framework, ADGM's Cyber Risk Management Rules, and DFSA Rulebook requirements. The piece covers regulatory expectations for identity, access management, MFA, data localization, and audit trails, then positions Teleport's unified identity layer, just-in-time access, machine identity, auto-discovery, and session recording as a way to operationalize these controls without sacrificing agility in sovereign cloud environments. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What does SAMA's Cyber Security Framework require for identity and access management? SAMA's Cyber Security Framework, in section 3.3.5, requires Member Organizations to implement systematic solutions supporting centralization, automation, MFA for remote and privileged access, and a comprehensive audit trail for IAM activities. Section 3.3.13 mandates MFA for a range of service user activities including basic registration and sign-on, alongside metrics-driven effectiveness measurement. _daily.dev surfaces regulatory and technical context for teams building compliant access controls in regulated markets._ ### What are the ADGM and DFSA requirements for privileged access management? ADGM's Cyber Risk Management framework (section 3.5.7-3.5.8) requires centralized, automated access management, approval workflows, least privilege, prompt revocation, recurring access reviews, unique identifiers for privileged accounts, and MFA plus encryption for privileged and internet-facing access. DFSA (5.5.8-5.5.9) similarly requires formal approval, least privilege, revocation, detection of dormant accounts, and MFA with encrypted communications, with both regulators requiring separation of admin from normal business activity. _Teams navigating overlapping access control mandates can track these compliance frameworks via daily.dev._ ## Similar posts on daily.dev - [Teleport Launches Agentic Identity Framework to Secure AI Agents Across Enterprise Infrastructure](https://daily.dev/posts/teleport-launches-agentic-identity-framework-to-secure-ai-agents-across-enterprise-infrastructure-vosijavmu) · InfoQ · 0 upvotes · 0 comments - [Why cloud infrastructure is the foundation for digital health in 2026](https://daily.dev/posts/why-cloud-infrastructure-is-the-foundation-for-digital-health-in-2026-ytah8csab) · Google Cloud · 0 upvotes · 0 comments --- Tags: [#cloud](https://daily.dev/tags/cloud), [#fintech](https://daily.dev/tags/fintech), [#compliance](https://daily.dev/tags/compliance) [View this post on daily.dev](https://daily.dev/posts/navigating-sama-adgm-dfsa-requirements-with-teleport-tdijqxjvy) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Navigating SAMA, ADGM & DFSA Requirements with Teleport","url":"https://daily.dev/posts/navigating-sama-adgm-dfsa-requirements-with-teleport-tdijqxjvy","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/navigating-sama-adgm-dfsa-requirements-with-teleport-tdijqxjvy"},"datePublished":"2026-08-23T12:22:56.657Z","dateModified":"2026-08-23T12:55:55.193Z","description":"Coalfire and Teleport outline how cloud service providers entering Saudi Arabia and UAE financial markets can meet SAMA's Cyber Security Framework, ADGM's...","image":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","thumbnailUrl":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/navigating-sama-adgm-dfsa-requirements-with-teleport-tdijqxjvy","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cloud,fintech,compliance","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"Navigating SAMA, ADGM & DFSA Requirements with Teleport"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/navigating-sama-adgm-dfsa-requirements-with-teleport-tdijqxjvy#faq","mainEntity":[{"@type":"Question","name":"What does SAMA's Cyber Security Framework require for identity and access management?","acceptedAnswer":{"@type":"Answer","text":"SAMA's Cyber Security Framework, in section 3.3.5, requires Member Organizations to implement systematic solutions supporting centralization, automation, MFA for remote and privileged access, and a comprehensive audit trail for IAM activities. Section 3.3.13 mandates MFA for a range of service user activities including basic registration and sign-on, alongside metrics-driven effectiveness measurement. daily.dev surfaces regulatory and technical context for teams building compliant access controls in regulated markets."}},{"@type":"Question","name":"What are the ADGM and DFSA requirements for privileged access management?","acceptedAnswer":{"@type":"Answer","text":"ADGM's Cyber Risk Management framework (section 3.5.7-3.5.8) requires centralized, automated access management, approval workflows, least privilege, prompt revocation, recurring access reviews, unique identifiers for privileged accounts, and MFA plus encryption for privileged and internet-facing access. DFSA (5.5.8-5.5.9) similarly requires formal approval, least privilege, revocation, detection of dormant accounts, and MFA with encrypted communications, with both regulators requiring separation of admin from normal business activity. Teams navigating overlapping access control mandates can track these compliance frameworks via daily.dev."}}]} ```