EIDSCA.AT01 - Authentication Method - Temporary Access Pass - State.
Overview
Whether the Temporary Access Pass is enabled in the tenant.
Use Temporary Access Pass for secure onboarding users (initial password replacement) and enforce MFA for registering security information in Conditional Access Policy.
Test script
https://graph.microsoft.com/beta/policies/authenticationMethodsPolicy/authenticationMethodConfigurations('TemporaryAccessPass')
.state -eq 'enabled'
Remediation action
Microsoft Learn - Enable Temporary Access Pass
Related links
- Open in Graph Explorer
- temporaryAccessPassAuthenticationMethodConfiguration resource type - Microsoft Graph v1.0 | Microsoft Learn
Test Metadata
| Field | Value |
|---|---|
| Test ID | EIDSCA.AT01 |
| Severity | Medium |
| Suite | Entra ID SCA |
| Product | Entra ID |
| Feature | Authentication methods |
| Area | Authentication |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| PowerShell test | Test-MtCheckEidscaAT01 |
| Services | Graph |
Source
- Test:
tests/eidsca/Test.EIDSCA.AT01.ps1 - Documentation:
tests/eidsca/Test.EIDSCA.AT01.md