TMA-AZURE-5.1.3
Ensure that 'multifactor authentication' is 'enabled' For All Users
説明
[IMPORTANT - Please read the section overview: If your organization pays for Microsoft Entra ID licensing (included in Microsoft 365 E3, E5, F5, or Business Premium, and EM&S E3 or E5 licenses) and CAN use Conditional Access, ignore the recommendations in this section and proceed to the Conditional Access section.] Enable multifactor authentication for all users. Note: Since 2024, Azure has been rolling out mandatory multifactor authentication. For more information: - https://azure.microsoft.com/en-us/blog/announcing-mandatory-multi-factor- authentication-for-azure-sign-in - https://learn.microsoft.com/en-us/entra/identity/authentication/concept- mandatory-multifactor-authentication Multifactor authentication requires an individual to present a minimum of two separate forms of authentication before access is granted. Multifactor authentication provides additional assurance that the in...
チェック方法
監査方法: 手動レビュー
この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。
Audit from Azure Portal 1. Go to Microsoft Entra ID. 2. Under Manage, click Users. 3. Click Per-user MFA from the top menu. 4. Ensure that Status is enabled for all users. Audit from PowerShell Run the following Graph PowerShell command: get-mguser -All | where {$_.StrongAuthenticationMethods.Count -eq 0} | Select-Object -Property UserPrincipalName If the output contains any UserPrincipalName, then this recommendation is non- compliant.
修正方法
修正方法: ガイダンスまたは IaC パッチ
Remediate from Azure Portal 1. Go to Microsoft Entra ID. 2. Under Manage, click Users. 3. Click Per-user MFA from the top menu. 4. Click the box next to a user with Status disabled. 5. Click Enable MFA. 6. Click Enable. 7. Repeat steps 1-6 for each user requiring remediation. Other options within Azure Portal - https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-enable- azure-mfa - https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa- mfasettings - https://learn.microsoft.com/en-us/entra/identity/conditional-access/policy-old- require-mfa-admin - https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa- getstarted#enable-multi-factor-authentication-with-conditional-access
プロパティ
- オペレーティングシステム
- すべて
- タグ
- authazurecloud
- 参照
- CIS Microsoft Azure Foundations Benchmark v6.0.0 - 5.1.3 Ensure that 'multifactor authentication' is 'enabled' For All Users