Azure Management should require multifactor authentication
Ensure Multi-factor Authentication is required for Azure Management. For designated users, they will be prompted to use their multi-factor authentication (MFA) process on logins.
What this control checks
Designated users are prompted to use multi-factor authentication (MFA) on logins to Azure.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.iam_conditional_access_mfa_enabled.
Framework-specific interpretation
CIS Azure Benchmark v4.0.0: Mapped to 6.2.6 (Ensure that multifactor authentication is required for Windows Azure Service Management API).
CIS Azure Benchmark v1.5.0: Mapped to 1.2.6 (Ensure Multi-factor Authentication is Required for Azure Management).
CIS Azure Benchmark v2.0.0: Mapped to 1.2.6 (Ensure Multi-factor Authentication is Required for Azure Management).
CIS Azure Benchmark v2.1.0: Mapped to 1.2.6 (Ensure Multifactor Authentication is Required for Windows Azure Service Management API).
CIS Azure Benchmark v3.0.0: Mapped to 2.2.7 (Ensure Multifactor Authentication is Required for Windows Azure Service Management API).
Framework mappings
The clauses this control is mapped to in each framework.
- 6.2.6 Ensure that multifactor authentication is required for Windows Azure Service Management API
- 1.2.6 Ensure Multi-factor Authentication is Required for Azure Management
- 1.2.6 Ensure Multi-factor Authentication is Required for Azure Management
- 1.2.6 Ensure Multifactor Authentication is Required for Windows Azure Service Management API
- 2.2.7 Ensure Multifactor Authentication is Required for Windows Azure Service Management API
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
iam_conditional_access_mfa_enabled - Powerpipe Control:
azure_compliance.control.iam_conditional_access_mfa_enabled
Last reviewed: 2026-10-13