last sync: 2024-Nov-25 18:54:24 UTC

Microsoft Managed Control 1344 - Authenticator Feedback | Regulatory Compliance - Identification and Authentication

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1344 - Authenticator Feedback
Id 2c895fe7-2d8e-43a2-838c-3a533a5b355e
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Identification and Authentication control
Additional metadata Name/Id: ACF1344 / Microsoft Managed Control 1344
Category: Identification and Authentication
Title: Authenticator Feedback
Ownership: Customer, Microsoft
Description: The information system obscures feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.
Requirements: Azure protects authenticator feedback using the built-in operating system security controls that protect passwords when authenticating to system components. Additionally, SSH and Remote Desktop Protocol (RDP) are used for authentication into the Azure production environment and provide obfuscation of credentials. No feedback is provided during the authentication process that could lead to potential exploitation by unauthorized users. Authenticators are displayed as asterisks so that the user is aware an authenticator is being entered, but the authenticator cannot be viewed.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC