| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1319 - Authenticator Management | ||
| Id | 66f7ae57-5560-4fc5-85c9-659f204e7a42 | ||
| Version | 1.0.0 Details on versioning |
||
| Versioning |
Versions supported for Versioning: 0 Built-in Versioning [Preview] |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Identification and Authentication control | ||
| Additional metadata |
Name/Id: ACF1319 / Microsoft Managed Control 1319 Category: Identification and Authentication Title: Authenticator Management - Authenticator Strength Ownership: Customer, Microsoft Description: The organization manages information system authenticators by: Ensuring that authenticators have sufficient strength of mechanism for their intended use; Requirements: Issued passwords meet Microsoft Corporate and Azure policy requirements respectively for password complexity. Initial Smart Card certificates are generated by Core Services Engineering and Operations (CSEO). Azure implements a minimum password length of at least fifteen (15) characters and complexity of at least one (1) uppercase, one (1) lowercase, one (1) number, and one (1) special character in accordance with C+AI Security policy. Smart cards are FIPS-140-2 level 3 validated to ensure sufficient strength of hardware token. PINs are required to be at least four characters. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|