last sync: 2024-Nov-25 18:54:24 UTC

Microsoft Managed Control 1314 - Identifier Management | Regulatory Compliance - Identification and Authentication

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1314 - Identifier Management
Id ef0c8530-efd9-45b8-b753-f03083d06295
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Identification and Authentication control
Additional metadata Name/Id: ACF1314 / Microsoft Managed Control 1314
Category: Identification and Authentication
Title: Identifier Management - Identifier Reuse Prevention
Ownership: Customer, Microsoft
Description: The organization manages information system identifiers by: Preventing reuse of identifiers for at least two years; and
Requirements: Unique user and service or device identifiers are not reused for two (2) years. This is enforced by Active Directory (AD). For users, smart cards are device-unique token identifiers which are uniquely paired to individuals. Smart card certificates are paired to an individual's AD Security Identifier (SID). These unique account identifier and device pairs are not reused.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC