TMA-CHROME-2.10.1
Ensure 'Allow automatic sign-in to Microsoft cloud identity providers' Is Enabled
설명
This policy setting allows accounts backed by a Microsoft® cloud identity provider (i.e., Microsoft Azure Active Directory or the consumer Microsoft account identity provider) can be signed into web properties using that identity automatically. Rationale: Enabling this policy setting allows users to use Microsoft Cloud Authentication for any site that requires CA (Cloud Authentication) and does not require an extension. The benchmark marks this recommendation Manual (organisation-specific value or not reliably checkable), so it is reported as SKIP with review steps.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
Confirm via Group Policy (gpresult /h or the GPMC) that Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Microsoft® Active Directory® management settings\Allow automatic sign- in to Microsoft® cloud identity providers is configured as the title requires. This group policy setting is backed by the following registry location which should be set to 1: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome:CloudAPAuthEnabled
조치 방법
조치 방식: 가이드 또는 인프라 패치
Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Microsoft® Active Directory® management settings\Allow automatic sign- in to Microsoft® cloud identity providers = Enabled: Enable Microsoft® cloud authentication
속성
- 운영 체제
- 모두
- 태그
- chromebrowsercis-l1manual
- 참고 자료
- CIS Google Chrome Benchmark v3.0.0 - 2.10.1 Ensure 'Allow automatic sign-in to Microsoft cloud identity providers' Is Enabled