ServiceNow CMDB CI relationship sync: faster, more complete →
Turbot Guardrails Hub 
Hub
Mods
Azure
40
Mods
164
Resource Types
1,930
Policies
943
Controls
103
Quick Actions
95
IAM

Policy: Azure > CIS v2.0 > 01 - Identity and Access Management > 1.08 Ensure that 'Number of days before users are asked to re-confirm their authentication information' is not set to '0'

Configures auditing against a CIS Benchmark item.

Level: 1

Ensure that the number of days before users are asked to re-confirm their authentication information is not set to 0.

This setting is necessary if you have setup 'Require users to register when signing in option'. If authentication re-confirmation is disabled, registered users will never be prompted to re-confirm their existing authentication information. If the authentication information for a user changes, such as a phone number or email, then the password reset information for that user reverts to the previously registered authentication information.

Resource Types

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

Controls

Policy Specification

Schema Type
string
Default
Per Azure > CIS v2.0 > 01 - Identity and Access Management
Valid Values [YAML]
  • Per Azure > CIS v2.0 > 01 - Identity and Access Management

  • Skip

  • Check: Benchmark using attestation

Category

In Your Workspace

Developers