Add user-authentication Allowed Values

[Gabeblis]

Committer Notes

Purpose

This PR aims to ensure that only the proper allowed values are used when determining if leveraged authorizations require user authentication.

Changes

Added Constraint:

• user-authentication: This constraint enforces that the user-authentication property in the SSP only allows the following enumerated values: (yes, no, not-applicable).

Test Data:

• 1 Invalid Test Data File: Demonstrates a failure case where the user-authentication property has an invalid value.
• 1 Valid Test Data File: Demonstrates a valid case where the user-authentication property has a valid value.

Added YAML Files:

• 2 YAML files: Included pass and fail YAML files.

All Submissions:

• Have you selected the correct base branch per Contributing guidance?
• Have you set "Allow edits and access to secrets by maintainers"?
• Have you checked to ensure there aren't other open Pull Requests for the same update/change?
• Have you squashed any non-relevant commits and commit messages? [instructions]
• Have you added an explanation of what your changes do and why you'd like us to include them?
• If applicable, have all FedRAMP Documents Related to OSCAL Adoption affected by the changes in this issue have been updated.?
• If applicable, does this PR reference the issue it addresses and explain how it addresses the issue?

By submitting a pull request, you are agreeing to provide this contribution under the CC0 1.0 Universal public domain dedication.

[aj-stein-gsa]

One question that seems important, otherwise looks good.

[aj-stein-gsa]

I apologize for this, but we were reviewing the acceptance criteria and noticed that we should have adjust the property name, but did not.

Can you re-review the updated issue requirements? I apologize in advance. Other than that, this PR is very solid.

[Gabeblis]

[e34c71a](/GSA/fedramp-automation/pull/921/commits/e34c71a2fa34b9d3c5adc9ea6871c0fc1e1d2bfa)

I corrected the constraint target per Brian's feedback on #891. This constraint now targets all the various acceptable component types. Changes here: c589260

stale

[kyhu65867]

This looks good to me Gabe :)