Control: 1.6 Ensure that 'Number of days before users are asked to re-confirm their authentication information' is not set to "0"
Description
Ensure that the number of days before users are asked to re-confirm their authentication information is not set to 0.
If authentication re-confirmation is disabled, registered users will never be prompted to reconfirm their existing authentication information. If the authentication information for a user, such as a phone number or email changes, then the password reset information for that user reverts to the previously registered authentication information.
Remediation
From Console
- Log in to Azure Active Directory
- Go to
Users - Go to
Password resetin side bar - Go to
Registration - Set the
Number of days before users are asked to re-confirm their authentication informationto your organization defined frequency
Note: By default, the 'Number of days before users are asked to re-confirm their authentication information' is set to '180 days'.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cis_v140_1_6Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cis_v140_1_6 --shareSQL
This control uses a named query:
select 'active_directory' as resource, 'info' as status, 'Manual verification required.' as reason;