Skip to main content
Version: 2.1.1-preview

MT.1010 - At least one Conditional Access policy is configured to block legacy authentication for Exchange ActiveSync.

Fabian BaderMerill FernandoFrode FlatenStefan WeySam Erde
Contributed by Fabian Bader with 4 co-contributorsAll contributors →

Overview​

Legacy authentication is an unsecure method to authenticate. This function checks if the tenant has at least one conditional access policy that blocks legacy authentication.

Learn more: https://learn.microsoft.com/entra/identity/conditional-access/howto-conditional-access-policy-block-legacy

Test Metadata​

FieldValue
Test IDMT.1010
SeverityHigh
SuiteMaester
CategoryCA
PowerShell testTest-MtCaBlockLegacyExchangeActiveSyncAuthentication
TagsCA, Maester, MT.1010

Source​

  • Pester test: tests/Maester/Entra/Test-ConditionalAccessBaseline.Tests.ps1
  • PowerShell source: powershell/public/maester/entra/Test-MtCaBlockLegacyExchangeActiveSyncAuthentication.ps1