Skip to content

Latest commit

 

History

History
26 lines (22 loc) · 2.4 KB

password-requires-lowercase.md

File metadata and controls

26 lines (22 loc) · 2.4 KB

CloudSploit

AZURE / Active Directory / Password Requires Lowercase

Quick Info

Plugin Title Password Requires Lowercase
Cloud AZURE
Category Active Directory
Description Ensures that all Azure passwords require lowercase characters
More Info Azure handles most password policy settings, including which character types are required. Azure requires 3 out of 4 of the following character types: lowercase, uppercase, special characters, and numbers.
AZURE Link https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy#password-policies-that-only-apply-to-cloud-user-accounts
Recommended Action No action necessary. Azure handles password requirement settings.

Detailed Remediation Steps

  1. Log into the Microsoft Azure Management Console.
  2. Select the "Search resources, services, and docs" option at the top and search for Azure Active Directory.
  3. Select the "Azure Active Directory". On the navigation panel, select the "Users" under Manage option.
  4. On the "Users" tab click on the "New User" option at the top.
  5. On the "New User" tab, click on the "Create user".
  6. Under the "Identity", enter details like "Username","Name", "First Name","Last Name". Select the group if required and define the role for the user.
  7. On the "Password" tab, click on the "Let me create the password".
  8. On the "Initial Tab" enter the password, and if the password doesn't contain any lower case letter than the Azure will automatically show the error message when you will click on "Create" button at the bottom.
  9. Repeat the above steps to create New User with pre-defined "Password Requires Lowercase".