compliance.tf
Azure Compliance ControlsMicrosoft Entra ID

Azure Management should require multifactor authentication

Ensure Multi-factor Authentication is required for Azure Management. For designated users, they will be prompted to use their multi-factor authentication (MFA) process on logins.

Framework mappings

The clauses this control is mapped to in each framework.

CIS Azure Benchmark v4.0.0

  • 6.2.6 Ensure that multifactor authentication is required for Windows Azure Service Management API

CIS Azure Benchmark v1.5.0

  • 1.2.6 Ensure Multi-factor Authentication is Required for Azure Management

CIS Azure Benchmark v2.0.0

  • 1.2.6 Ensure Multi-factor Authentication is Required for Azure Management

CIS Azure Benchmark v2.1.0

  • 1.2.6 Ensure Multifactor Authentication is Required for Windows Azure Service Management API

CIS Azure Benchmark v3.0.0

  • 2.2.7 Ensure Multifactor Authentication is Required for Windows Azure Service Management API

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

  • Compliance.tf Control: iam_conditional_access_mfa_enabled
  • Powerpipe Control: azure_compliance.control.iam_conditional_access_mfa_enabled

Last reviewed: 2026-10-13

View all Azure controls →

On this page

Ask AI about this

Help improve this page