Skip to main content

💼 2.1.4 Ensure that 'Allow users to remember multi-factor authentication on devices they trust' is Disabled (Manual)

  • Contextual name: 💼 2.1.4 Ensure that 'Allow users to remember multi-factor authentication on devices they trust' is Disabled (Manual)
  • ID: /frameworks/cis-azure-v3.0.0/02/01/04
  • Located in: 💼 2.1 Security Defaults (Per-User MFA)

Description​

[IMPORTANT - Please read the section overview: If your organization pays for Microsoft Entra ID licensing (included in Microsoft 365 E3, E5, or F5, and EM&S E3 or E5 licenses) and CAN use Conditional Access, ignore the recommendations in this section and proceed to the Conditional Access section.]

Do not allow users to remember multi-factor authentication on devices.

Similar​

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (1)​

PolicyLogic CountFlags
📝 Microsoft Entra ID Allow Users To Remember MFA On Devices They Trust is enabled 🟢🟢 x3