1.11 Ensure that 'Users can register applications' is set to 'No'

Information

Require administrators to register third-party applications.

Rationale:

It is recommended to let administrator register custom-developed applications. This ensures that the application undergoes a security review before exposing active directory data to it.

Impact:

This might create additional requests that administrators need to fulfill quite often.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

From Azure Console

Go to Azure Active Directory

Go to Users

Go to User settings

Set Users can register applications to No

Default Value:

By default, Users can register applications is set to Yes.

See Also

https://workbench.cisecurity.org/files/3459

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-8, CSCv7|2

Plugin: microsoft_azure

Control ID: 8502c2eb668de87530249d0ff2aeb15175ec4eb798cb2c80ba8228f8b14a93ee