Microsoft 365
TMA-M365-5.2.4.3
Ensure SSPR registration and authentication re- confirmation are required
Açıklama
The Require users to register when signing in? setting controls whether users are prompted to register their self-service password reset (SSPR) authentication methods at their next sign-in. When set to Yes, users who have not yet registered are prompted to do so upon signing in. The Number of days before users are asked to re-confirm their authentication information setting designates the period of time before registered users are prompted to re-confirm their existing authentication information is still valid, up to a maximum of 730 days. If set to 0 days, registered users will never be prompted to re-confirm their authentication information. Without requiring users to register, users may never establish SSPR authentication methods, rendering the re-confirmation setting ineffective regardless of the value it is set to. When users do register authentication methods for self-service pas...
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
To audit using the UI: 1. Navigate to Microsoft Entra admin center https://entra.microsoft.com/. 2. Expand Entra ID > Password reset and select Registration. 3. Verify that Require users to register when signing in? is set to Yes. 4. Verify that Number of days before users are asked to re-confirm their authentication information is not set to 0.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
To remediate using the UI: 1. Navigate to Microsoft Entra admin center https://entra.microsoft.com/. 2. Expand Entra ID > Password reset and select Registration. 3. Set Require users to register when signing in? to Yes. 4. Set Number of days before users are asked to re-confirm their authentication information to any organization-approved value other than 0. 5. Click Save.
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- authm365saas
- Referans
- CIS Microsoft 365 Foundations Benchmark v7.0.0 - 5.2.4.3 Ensure SSPR registration and authentication re- confirmation are required