AzPolicyAdvertizer

last sync: 2025-Apr-29 17:16:02 UTC

Microsoft Managed Control 1341 - Authenticator Management | Multiple Information System Accounts | Regulatory Compliance - Identification and Authentication

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1341 - Authenticator Management | Multiple Information System Accounts
Id 34cb7e92-fe4c-4826-b51e-8cd203fa5d35
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Identification and Authentication control
Cloud environments AzureCloud = true
AzureUSGovernment = true
AzureChinaCloud = unknown
Available in AzUSGov The Policy is available in AzureUSGovernment cloud. Version: '1.0.0'
Repository: Azure-Policy 34cb7e92-fe4c-4826-b51e-8cd203fa5d35
Additional metadata Name/Id: ACF1341 / Microsoft Managed Control 1341
Category: Identification and Authentication
Title: Authenticator Management | Multiple Information System Accounts
Ownership: Customer, Microsoft
Description: The organization implements unique smart cards to manage the risk of compromise due to individuals having accounts on multiple information systems.
Requirements: Azure uses smart cards that differentiate between different AD domains. This ensures that personnel use different authenticators when accessing the two systems and prevents an attacker from gaining access to both systems if one set of authenticators is compromised. In addition, Azure uses single-sign-on, encryption of AAD passwords that exist in the back-end and passwords utilized where smartcards are not possible via storage in Azure Key Vault, and encryption of all traffic with HTTPS, mitigating the risk of compromise.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Compliance
The following 1 compliance controls are associated with this Policy definition 'Microsoft Managed Control 1341 - Authenticator Management | Multiple Information System Accounts' (34cb7e92-fe4c-4826-b51e-8cd203fa5d35)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
NIS2 IM._Identity_Management_10 NIS2_IM._Identity_Management_10 NIS2_IM._Identity_Management_10 IM. Identity Management The use of multi-factor authentication Customer, Microsoft Cryptographic Module Authentication The use of multi-factor authentication or continuous authentication solutions, secured voice, video and text communications and secured emergency communication systems within the entity, where appropriate. 29
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type polSet in AzUSGov
[Preview]: NIS2 32ff9e30-4725-4ca7-ba3a-904a7721ee87 Regulatory Compliance Preview BuiltIn unknown
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC