EIDSCA.PR01 - Default Settings - Password Rule Settings - Password Protection - Mode.
Overview
If set to Enforce, users will be prevented from setting banned passwords and the attempt will be logged. If set to Audit, the attempt will only be logged.
Microsoft Entra Password Protection - Microsoft Entra ID - Microsoft Learn
Test script
https://graph.microsoft.com/beta/settings
.values -eq 'Enforce'
Related links
- Open in Graph Explorer
- directorySetting resource type - Microsoft Graph beta | Microsoft Learn
- View in Microsoft Entra admin center
Test Metadata
| Field | Value |
|---|---|
| Test ID | EIDSCA.PR01 |
| Severity | High |
| Suite | Entra ID SCA |
| Category | General |
| PowerShell test | Test-MtEidscaPR01 |
| Tags | EIDSCA, EIDSCA.PR01 |
Source
- Pester test:
tests/EIDSCA/Test-EIDSCA.Generated.Tests.ps1 - PowerShell source:
powershell/internal/eidsca/Test-MtEidscaPR01.ps1