Disable Microsoft Entra ID accounts that have legacy authentication enabled
Recommendation Impact Across KPIs
| KPI | Impact | Calculated? |
|---|---|---|
| Reliability: | No direct reliability impact identified | ❌ |
| Security Compliance: | PRIMARY REC - Significant improvement in security posture through elimination of vulnerable authentication methods | ✅ |
| Economic: | No direct economic impact calculated | ❌ |
| User Experience: | No direct user experience impact calculated | ❌ |
| Environment: | No environmental impact calculated | ❌ |
Score Calculation
1. Data Ingestion
- Asset Type: User
- Current authentication status
- Legacy authentication protocol usage
- Account activity metrics
2. Data Enrichment
- Mapping to NIST compliance standards
- Modern authentication alternatives
- Security impact assessment
3. Health Score
- Calculate the Security Compliance score using: (NIST Score * NIST Asset Weight) * Multiplier for length of compliance
- Source: DataTable-NIST
Example Graph
Pie chart showing the distribution between accounts with and without legacy authentication enabled, providing a clear visual representation of the security exposure across the organization.
Business Opportunities
Product Sales Opportunity
As a provider this recommendation provides an opportunity to sell additional security solutions, particularly MFA tools and modern authentication systems that can replace legacy authentication methods.
Professional Services Opportunity
The recommendation provides an opportunity for professional services to assist with identifying and disabling legacy authentication, implementing modern authentication methods, and providing training. Services include security assessment, implementation planning, and migration support.
Remediation Guidance
To resolve the recommendation the following steps are recommended:
- Develop a Legacy Authentication Remediation Plan
- Identify affected accounts
- Assess impact
- Allocate resources
Establish timeline
Communicate with Stakeholders
- Notify account owners
- Provide guidance
Set expectations
Execute the Disablement of Legacy Authentication
- Identify accounts with legacy authentication
- Disable legacy authentication
- Enforce modern authentication
Test functionality
Post-Disablement Monitoring
- Monitor authentication methods
- Address issues
Audit access
Ongoing Maintenance
- Conduct periodic reviews
- Automate legacy protocol blocking
- Ensure compliance
Supporting Information
Supported Data Sources
- Microsoft Graph Entra ID
Recommendation Categorisation
- Security
- Identity Management
- Compliance
Supported Instances
- Microsoft Entra ID
- Azure Active Directory
- Office 365 Services
Planned Instances
- Future Microsoft authentication services
- Third-party identity providers
- Cloud service integrations