Control: 1.6 Ensure that 'Number of days before users are asked to re-confirm their authentication information' is not set to "0"
Description
Ensure that the number of days before users are asked to re-confirm their authentication information is not set to 0.
If authentication re-confirmation is disabled, registered users will never be prompted to reconfirm their existing authentication information. If the authentication information for a user, such as a phone number or email changes, then the password reset information for that user reverts to the previously registered authentication information.
Remediation
From Console
- Log in to Azure Active Directory
- Go to
Users - Go to
Password resetin side bar - Go to
Registration - Set the
Number of days before users are asked to re-confirm their authentication informationto your organization defined frequency
Note: By default, the 'Number of days before users are asked to re-confirm their authentication information' is set to '180 days'.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cis_v130_1_6Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cis_v130_1_6 --shareSQL
This control uses a named query:
ad_manual_control