Skip to main content
Version: 2.1.1-preview

MT.1016 - At least one Conditional Access policy is configured to require MFA for guest access.

Fabian BaderMerill FernandoFrode FlatenStefan WeySam ErdeJan Bakker
Contributed by Fabian Bader with 5 co-contributorsAll contributors →

Overview​

This check verifies if there is at least one conditional access policy that requires multifactor authentication for all guest accounts.

See Require multifactor authentication for guest access - Microsoft Learn

Test Metadata​

FieldValue
Test IDMT.1016
SeverityHigh
SuiteMaester
CategoryCA
PowerShell testTest-MtCaMfaForGuest
TagsCA, Maester, MT.1016

Source​

  • Pester test: tests/Maester/Entra/Test-ConditionalAccessBaseline.Tests.ps1
  • PowerShell source: powershell/public/maester/entra/Test-MtCaMfaForGuest.ps1