EIDSCA.AT01 - Authentication Method - Temporary Access Pass - State.

Contributed by Thomas Naunheim with 5 co-contributorsAll contributors →

Overview

Whether the Temporary Access Pass is enabled in the tenant.

Use Temporary Access Pass for secure onboarding users (initial password replacement) and enforce MFA for registering security information in Conditional Access Policy.

Test script

https://graph.microsoft.com/beta/policies/authenticationMethodsPolicy/authenticationMethodConfigurations('TemporaryAccessPass')
.state -eq 'enabled'

Remediation action

Microsoft Learn - Enable Temporary Access Pass

Related links

• Open in Graph Explorer
• temporaryAccessPassAuthenticationMethodConfiguration resource type - Microsoft Graph v1.0 | Microsoft Learn

Test Metadata

Field	Value
Test ID	EIDSCA.AT01
Severity	High
Suite	Entra ID SCA
Category	General
PowerShell test	Test-MtEidscaAT01
Tags	EIDSCA, EIDSCA.AT01

Source

• Pester test: tests/EIDSCA/Test-EIDSCA.Generated.Tests.ps1
• PowerShell source: powershell/internal/eidsca/Test-MtEidscaAT01.ps1