Azure_IAM_22 - Cloudlytics

Azure_IAM_22

Ensure that Require Multi - Factor Auth to join devices is set to Yes

Description

Joining devices to the active directory should require Multi-factor authentication.

Remediation

Perform the following in the Azure Console:

Go to Azure Active Directory
Go to Users and group
Go to Device settings
Ensure that Require Multi-Factor Auth to join devices is set to Yes

References:

https://blogs.technet.microsoft.com/janketil/2016/02/29/azure-mfa-for-enrollment-in-intune-and-azure-ad-device-registration-explained/

Service

IAM

Severity

Medium

Compliance

Mapping