EIDSCA.AP05 - Default Authorization Settings - Sign-up for email based subscription.
Overview
Indicates whether users can sign up for email based subscriptions.
Test script
https://graph.microsoft.com/beta/policies/authorizationPolicy
.allowedToSignUpEmailBasedSubscriptions -eq 'false'
Related links
MITRE ATT&CK
| Tactic | Technique | Mitigation |
|---|---|---|
| TA0001 - Initial Access - Initial Access |
Test Metadata
| Field | Value |
|---|---|
| Test ID | EIDSCA.AP05 |
| Severity | Medium |
| Suite | Entra ID SCA |
| Category | General |
| PowerShell test | Test-MtEidscaAP05 |
| Tags | EIDSCA, EIDSCA.AP05 |
Source
- Pester test:
tests/EIDSCA/Test-EIDSCA.Generated.Tests.ps1 - PowerShell source:
powershell/internal/eidsca/Test-MtEidscaAP05.ps1