STIGQter: STIG Summary: Microsoft Entra ID Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Feb 2025:

Microsoft Entra ID must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the application.

DISA Rule

SV-270209r1085618_rule

Vulnerability Number

V-270209

Group Title

SRG-APP-000068

Rule Version

ENTR-ID-000150

Severity

CAT II

CCI(s)

• CCI-000048 - Display an organization-defined system use notification message or banner to users before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidelines.
• CCI-000050 - Retain the notification message or banner on the screen until users acknowledge the usage conditions and take explicit actions to log on to or further access the system.
• CCI-001384 - For publicly accessible systems, display system use information with organization-defined conditions before granting further access to the publicly accessible system.
• CCI-001385 - For publicly accessible systems, displays references, if any, to monitoring that are consistent with privacy accommodations for such systems that generally prohibit those activities.
• CCI-001386 - For publicly accessible systems, displays references, if any, to recording that are consistent with privacy accommodations for such systems that generally prohibit those activities.
• CCI-001387 - For publicly accessible systems, displays references, if any, to auditing that are consistent with privacy accommodations for such systems that generally prohibit those activities.
• CCI-001388 - For publicly accessible systems, includes a description of the authorized uses of the system.

Weight

10

Fix Recommendation

To create the standard DOD banner in Entra ID:

1. Sign in to the Microsoft Entra admin center as a Global Administrator.
2. Browse to or search "Company Branding".
3. Select "Customize" under "Default sign-in experience".
4. Browse to the "Sign-in form" tab and place the required DOD banner text in the "Sign-in page text". Note: This field is limited to 1024 characters.
5. Populate all required fields.
6. Click "Review + Create".

Check Contents

Verify Entra ID has been configured to display the DOD logon banner when a user logs on.

1. Sign in to the Microsoft Entra admin center as a Global Administrator.
2. Browse to or search "Company Branding".
3. Browse to the "Sign-in form" tab and review the required DOD banner text in the "Sign-in page text". Note: This field is limited to 1024 characters.

If the DOD logon banner text is not present in the "Sign-in page text" field, this is a finding.

Vulnerability Number

V-270209

Documentable

False

Rule Version

ENTR-ID-000150

Severity Override Guidance

Verify Entra ID has been configured to display the DOD logon banner when a user logs on.

1. Sign in to the Microsoft Entra admin center as a Global Administrator.
2. Browse to or search "Company Branding".
3. Browse to the "Sign-in form" tab and review the required DOD banner text in the "Sign-in page text". Note: This field is limited to 1024 characters.

If the DOD logon banner text is not present in the "Sign-in page text" field, this is a finding.

Check Content Reference

M

Target Key

5671