MT.1018 - At least one Conditional Access policy is configured to enforce sign-in frequency for non-corporate devices.
Overview
Sign-in frequency conditional access policy can be helpful to minimize the risk of data leakage from a shared device.
Learn more: https://aka.ms/CATemplatesBrowserSession
Test Metadata
| Field | Value |
|---|---|
| Test ID | MT.1018 |
| Severity | Medium |
| Suite | Maester |
| Category | CA |
| PowerShell test | Test-MtCaEnforceSignInFrequency |
| Tags | CA, Maester, MT.1018 |
Source
- Pester test:
tests/Maester/Entra/Test-ConditionalAccessBaseline.Tests.ps1 - PowerShell source:
powershell/public/maester/entra/Test-MtCaEnforceSignInFrequency.ps1