MT.1019 - At least one Conditional Access policy is configured to enable application enforced restrictions.
Overview
A Conditional Access policy with application-enforced restrictions can help minimize the risk of data leakage from a shared device.
Learn more: https://aka.ms/CATemplatesAppRestrictions
Remediation action
Review the configuration described above.
Test Metadata
| Field | Value |
|---|---|
| Test ID | MT.1019 |
| Severity | Medium |
| Suite | Maester |
| Product | Entra ID |
| Related products | SharePoint, Exchange Online |
| Feature | Conditional Access |
| Area | Access control |
| Resource type | Tenant |
| User impact | Medium |
| Implementation cost | Medium |
| MITRE ATT&CK | T1213.002 Sharepoint, T1530 Data from Cloud Storage |
| PowerShell test | Test-MtCaApplicationEnforcedRestriction |
| Services | Graph |
| Compatible licenses | AAD_PREMIUM |
Source
- Test:
tests/maester/entra/Test.MT.1019.ps1 - Documentation:
tests/maester/entra/Test.MT.1019.md