EIDSCA.AM09 - Authentication Method - Microsoft Authenticator - Show geographic location in push and passwordless notifications.
Overview
Determines whether the user's Authenticator app will show them the geographic location of where the authentication request originated from.
Test script
https://graph.microsoft.com/beta/policies/authenticationMethodsPolicy/authenticationMethodConfigurations('MicrosoftAuthenticator')
.featureSettings.displayLocationInformationRequiredState.state -eq 'enabled'
Related links
- Open in Graph Explorer
- microsoftAuthenticatorAuthenticationMethodConfiguration resource type - Microsoft Graph v1.0 | Microsoft Learn
Test Metadata
| Field | Value |
|---|---|
| Test ID | EIDSCA.AM09 |
| Severity | Medium |
| Suite | Entra ID SCA |
| Product | Entra ID |
| Feature | Authentication methods |
| Area | Authentication |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | T1621 Multi-Factor Authentication Request Generation |
| Supports controls | nist-800-53-r5:IA-2(13), nist-800-53-r5:IA-2(1) |
| PowerShell test | Test-MtCheckEidscaAM09 |
| Services | Graph |
Source
- Test:
tests/eidsca/Test.EIDSCA.AM09.ps1 - Documentation:
tests/eidsca/Test.EIDSCA.AM09.md