EIDSCA-AM07: EIDSCA AM07: Authentication Method - Microsoft Authenticator - Included users/groups to show application name in push and passwordless notifications
- Platform
- Entra ID / M365
- Category
- EIDSCA Baseline
- Severity
- Medium
- Zero Trust pillar
- Identity (weight 3)
- Golden fixtures
- 3
- Branch coverage
- Observed: fixtures prove the verdicts they exercise
- Provenance
- baseline
What it checks
Entra ID security-configuration control (EIDSCA AM07): evaluates 'featureSettings.displayAppInformationRequiredState.includeTarget.id' on the MicrosoftAuthenticator authentication method against the recommended secure value.
Recommended value
eq all_users
Remediation
Configure the MicrosoftAuthenticator authentication method so 'featureSettings.displayAppInformationRequiredState.includeTarget.id' is set to all_users. (Entra ID security-configuration baseline, control EIDSCA AM07.)
Fixture-proven verdicts
Every verdict below is proven by a golden fixture in the module's gating test suite. This table derives from the last green run; it cannot be edited by hand.
| Scenario | Expected verdict |
|---|---|
| fail | FAIL |
| no-data | Not Assessed |
| pass | PASS |
Framework mappings
- EIDSCA
- AM07
Zero analytics. Zero tracking. Zero cookies. This site makes no external requests, so there is nothing to consent to.
Guerrilla is free and open source. · Validation
Guerrilla is written and maintained by Jim Tyler. This copy lives on jimtyler.org; the project also publishes at guerrilla.army.