Control: Azure > CIS v5.0 > 5 - Identity Services > 5.02 - Conditional Access > 5.02.04 - Ensure that a multifactor authentication policy exists for all users

Configures auditing against a CIS Benchmark item.

Level: 2

A Conditional Access policy can be enabled to ensure that users are required to use Multifactor Authentication (MFA) to login.

Note: Since 2024, Azure has been rolling out mandatory multifactor authentication. For more information: - https://azure.microsoft.com/blog/announcing-mandatory-multi-factorauthentication-for-azure-sign-in - https://learn.microsoft.com/entra/identity/authentication/concept-mandatory-multifactor-authentication

Multifactor authentication is strongly recommended to increase the confidence that a claimed identity can be proven to be the subject of the identity. This results in a stronger authentication chain and reduced likelihood of exploitation.

Resource Types

This control targets the following resource types:

This control type relies on these other policies when running actions:

Control Type URI

tmod:@turbot/azure-cisv5-0#/control/types/r050204

Category URI

tmod:@turbot/cis#/control/categories/v071603

GraphQL

query controlType(id: "tmod:@turbot/azure-cisv5-0#/control/types/r050204") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-cisv5-0#/control/types/r050204'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-cisv5-0#/control/types/r050204"