MT.1008 - Require MFA vs. Require authentication strength

maester365 / maester

The core repository for the Maester module with helper cmdlets that will be called from the Pester tests.

https://maester.dev

MIT License

299 stars 73 forks source link

Open IE-MP opened 4 months ago

IE-MP commented 4 months ago

Should https://maester.dev/docs/tests/MT.1008/ be failed if a policy exists that requires authentication strength of Phish-resistant MFA for admins?

Or is the assumption both policies are needed?

f-bader commented 3 months ago

MT.1008 checks both Authentication Strength as well as the "legacy setting" for MFA. So it should only fail if both are missing

IE-MP commented 3 months ago

Appreciate the quick reply, not sure what I'm missing. mfa2 mfa1

f-bader commented 3 months ago

I will repo this and let you know.