Azure_IAM_7 - Cloudlytics

Azure_IAM_7

Ensure that Notify users on password resets? is set to Yes

Description

Ensure that users are notified on their primary and secondary emails on password resets.

Remediation

Perform the following in the Azure Console:

Go to Azure Active Directory
Go to Users and group
Go to Password reset
Go to Notification
Set Notify users on password resets? to Yes

References:

https://docs.microsoft.com/en-us/azure/active-directory/active-directory-passwords-how-it-works#notifications

Service

IAM

Severity

Medium

Compliance

Mapping