Azure_IAM_5 - Cloudlytics

Azure_IAM_5

Ensure that Number of methods required to reset is set to 2

Description

Ensure that two alternate forms of identification are provided before allowing a password reset.

Remediation

Perform the following in the Azure Console:

Go to Azure Active Directory
Go to Users and group
Go to Password reset
Go to Authentication methods
Set the Number of methods required to reset to 2

References:

https://docs.microsoft.com/en-us/azure/active-directory/active-directory-passwords-faq#password-reset-registration

Service

IAM

Severity

Medium

Compliance

Mapping