HIGHCIS 1.4

Ensure conditional access policies block legacy authentication

Legacy authentication protocols should be blocked as they cannot use MFA.

Security Impact

Legacy protocols bypass MFA requirements, allowing password-only access.

How to Remediate

Create Conditional Access policy blocking legacy authentication for all users.

Affected Resources

Microsoft.AAD/conditionalAccess

Compliance Frameworks

CIS Azure v1.5.0SOC 2PCI-DSS

How TigerGate Helps

TigerGate continuously monitors your Azure environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all Azure Active Directory resources across your Azure subscriptions every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for CIS Azure v1.5.0, SOC 2, PCI-DSS compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
azure-identity-7
Service
Azure Active Directory
Category
Access Control
Severity
HIGH
CIS Benchmark
1.4

Automate This Check

TigerGate automatically scans your Azure environment for this and 160+ other security checks.

Start Free Trial

Related Azure Active Directory Checks

View all checks
azure-identity-1critical

Ensure MFA is enabled for all users

azure-identity-2critical

Ensure MFA is enabled for privileged accounts

azure-identity-3medium

Ensure guest user access is restricted

azure-identity-4medium

Ensure self-service password reset is enabled

azure-identity-5medium

Ensure password hash sync is enabled for hybrid identity