EIDSCA.AF01 - Authentication Method - FIDO2 security key - State.

+1

Contributed by Thomas Naunheim with 6 co-contributorsAll contributors →

Overview

Whether the FIDO2 security keys is enabled in the tenant.

enabled

Test script

https://graph.microsoft.com/beta/policies/authenticationMethodsPolicy/authenticationMethodConfigurations('Fido2')
.state -eq 'enabled'

Remediation action

Microsoft Learn - Enable passkeys (FIDO2) for your organization: Enable FIDO2 security key

Related links

• Open in Graph Explorer
• fido2AuthenticationMethodConfiguration resource type - Microsoft Graph v1.0 | Microsoft Learn

Test Metadata

Field	Value
Test ID	EIDSCA.AF01
Severity	High
Suite	Entra ID SCA
Category	General
PowerShell test	Test-MtEidscaAF01
Tags	EIDSCA, EIDSCA.AF01

Source

• Pester test: tests/EIDSCA/Test-EIDSCA.Generated.Tests.ps1
• PowerShell source: powershell/internal/eidsca/Test-MtEidscaAF01.ps1