EIDSCA.AM03 - Authentication Method - Microsoft Authenticator - Require number matching for push notifications.

Contributed by Thomas NaunheimAll contributors →

Overview

Defines if number matching is required for MFA notifications.

Test script

https://graph.microsoft.com/beta/policies/authenticationMethodsPolicy/authenticationMethodConfigurations('MicrosoftAuthenticator')
.featureSettings.numberMatchingRequiredState.state -eq 'enabled'

Related links

• Open in Graph Explorer
• microsoftAuthenticatorAuthenticationMethodConfiguration resource type - Microsoft Graph v1.0 | Microsoft Learn

Test Metadata

Field	Value
Test ID	EIDSCA.AM03
Severity	High
Suite	Entra ID SCA
Product	Entra ID
Feature	Authentication methods
Area	Authentication
Resource type	Tenant
User impact	Low
Implementation cost	Low
MITRE ATT&CK	T1621 Multi-Factor Authentication Request Generation
Supports controls	nist-800-53-r5:IA-2(8), nist-800-53-r5:IA-2(1)
PowerShell test	Test-MtCheckEidscaAM03
Services	Graph

Source

• Test: tests/eidsca/Test.EIDSCA.AM03.ps1
• Documentation: tests/eidsca/Test.EIDSCA.AM03.md