last sync: 2024-May-24 18:03:04 UTC

Microsoft Managed Control 1319 - Authenticator Management | Regulatory Compliance - Identification and Authentication

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1319 - Authenticator Management
Id 66f7ae57-5560-4fc5-85c9-659f204e7a42
Version 1.0.0
Details on versioning
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Identification and Authentication control
Additional metadata Name/Id: ACF1319 / Microsoft Managed Control 1319
Category: Identification and Authentication
Title: Authenticator Management - Authenticator Strength
Ownership: Customer, Microsoft
Description: The organization manages information system authenticators by: Ensuring that authenticators have sufficient strength of mechanism for their intended use;
Requirements: Issued passwords meet Microsoft Corporate and Azure policy requirements respectively for password complexity. Initial Smart Card certificates are generated by Core Services Engineering and Operations (CSEO). Azure implements a minimum password length of at least fifteen (15) characters and complexity of at least one (1) uppercase, one (1) lowercase, one (1) number, and one (1) special character in accordance with C+AI Security policy. Smart cards are FIPS-140-2 level 3 validated to ensure sufficient strength of hardware token. PINs are required to be at least four characters.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC