Skip to main content
Version: 2.3.0

EIDSCA.AP05 - Default Authorization Settings - Sign-up for email based subscription.

Thomas NaunheimMerill FernandoFabian BaderSam ErdeJohn FloresStefan Wey
Contributed by Thomas Naunheim with 5 co-contributorsAll contributors →

Overview​

Indicates whether users can sign up for email based subscriptions.

Test script​

https://graph.microsoft.com/beta/policies/authorizationPolicy
.allowedToSignUpEmailBasedSubscriptions -eq 'false'

Remediation action​

Microsoft Graph PowerShell: Update-MgPolicyAuthorizationPolicy -AllowedToSignupEmailBasedSubscriptions $false

MITRE ATT&CK​

TacticTechniqueMitigation
TA0001 - Initial Access - Initial Access

Test Metadata​

FieldValue
Test IDEIDSCA.AP05
SeverityMedium
SuiteEntra ID SCA
CategoryGeneral
PowerShell testTest-MtEidscaAP05
TagsEIDSCA, EIDSCA.AP05

Source​

  • Pester test: tests/EIDSCA/Test-EIDSCA.Generated.Tests.ps1
  • PowerShell source: powershell/internal/eidsca/Test-MtEidscaAP05.ps1