EIDSCA.AG01 - Authentication Method - General Settings - Manage migration.
Overview
The state of migration from the legacy multifactor authentication and self-service password reset (SSPR) policies to the Authentication methods policy. Legacy policies are respected in the premigration and migrationInProgress states and ignored in the migrationComplete state.
Complete the migration from the legacy multifactor authentication and self-service password reset policies to the unified Authentication methods policy. Review the enabled methods and their user scopes before marking migration complete.
Test script
https://graph.microsoft.com/beta/policies/authenticationMethodsPolicy
.policyMigrationState -in @('migrationComplete', '')
Remediation action
Microsoft Learn - How to migrate to the Authentication methods policy
Related links
- Open in Graph Explorer
- Get authenticationMethodsPolicy - Microsoft Graph v1.0 | Microsoft Learn
- View in Microsoft Entra admin center
Test Metadata
| Field | Value |
|---|---|
| Test ID | EIDSCA.AG01 |
| Severity | Low |
| Suite | Entra ID SCA |
| Product | Entra ID |
| Feature | Authentication methods |
| Area | Authentication |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Medium |
| MITRE ATT&CK | None |
| Supports controls | nist-800-53-r5:CM-7 |
| PowerShell test | Test-MtCheckEidscaAG01 |
| Services | Graph |
Source
- Test:
tests/eidsca/Test.EIDSCA.AG01.ps1 - Documentation:
tests/eidsca/Test.EIDSCA.AG01.md