EIDSCA.AM10 - Authentication Method - Microsoft Authenticator - Included users/groups to show geographic location in push and passwordless notifications.
Overview
Object Id or scope of users which will be showing geographic location in the Authenticator App.
Test script
https://graph.microsoft.com/beta/policies/authenticationMethodsPolicy/authenticationMethodConfigurations('MicrosoftAuthenticator')
.featureSettings.displayLocationInformationRequiredState.includeTarget.id -eq 'all_users'
Related links
- Open in Graph Explorer
- microsoftAuthenticatorAuthenticationMethodConfiguration resource type - Microsoft Graph v1.0 | Microsoft Learn
Test Metadata
| Field | Value |
|---|---|
| Test ID | EIDSCA.AM10 |
| Severity | Medium |
| Suite | Entra ID SCA |
| Product | Entra ID |
| Feature | Authentication methods |
| Area | Authentication |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | T1621 Multi-Factor Authentication Request Generation |
| Supports controls | nist-800-53-r5:IA-2(13), nist-800-53-r5:IA-2(1) |
| PowerShell test | Test-MtCheckEidscaAM10 |
| Services | Graph |
Source
- Test:
tests/eidsca/Test.EIDSCA.AM10.ps1 - Documentation:
tests/eidsca/Test.EIDSCA.AM10.md