Skip to main content
Version: 2.1.1-preview

MT.1007 - At least one Conditional Access policy is configured to require MFA for all users.

Fabian BaderMerill FernandoFrode FlatenMichael Morten SonneBrian ReidSam Erde+2
Contributed by Fabian Bader with 7 co-contributorsAll contributors →

Overview​

This test checks if the tenant has at least one conditional access policy requiring MFA for all users.

See Require MFA for all users - Microsoft Learn

Test Metadata​

FieldValue
Test IDMT.1007
SeverityHigh
SuiteMaester
CategoryCA
PowerShell testTest-MtCaMfaForAllUsers
TagsCA, Maester, MT.1007

Source​

  • Pester test: tests/Maester/Entra/Test-ConditionalAccessBaseline.Tests.ps1
  • PowerShell source: powershell/public/maester/entra/Test-MtCaMfaForAllUsers.ps1