MEDIUM
Source
CloudSploit
ID
security-defaults-enabled

Security Defaults Enabled

Ensures that security defaults are enabled in Microsoft Entra ID.

Security defaults are preconfigured identity security settings that require all users and administrators to register for multi-factor authentication, challenge users with multi-factor authentication when needed and block legacy authentication protocols. Enabling security defaults provides a basic level of identity protection at no extra cost.

Enable security defaults from Microsoft Entra ID properties.