CISA.MS.SHAREPOINT.3.3: Reauthentication days for people who use a verification code SHALL be set to 30 days or less.
| ID | CISA.MS.SHAREPOINT.3.3 |
| Severity | Medium |
| Suite | CISA SCuBA baselines |
| Product | SharePoint |
| Feature | External sharing |
| Security area | Authentication |
| Resource type | Tenant |
| User impact of fixing | Low |
| Effort to fix | Low |
| Benchmark | CISA SCuBA Secure Configuration Baselines for Microsoft 365 ScubaGear main, 2026-10-11, MS.SHAREPOINT.3.3 (SHALL) |
| Framework controls | cisa-scuba:MS.SHAREPOINT.3.3nist-800-53-r5:IA-11 Re-authentication |
| MITRE ATT&CK | T1213.002, T1530 |
| Reads from | SharePoint Online PowerShell |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Reauthentication days for people who use a verification code SHALL be set to 30 days or less.
Rationale: Requiring periodic reauthentication via verification codes ensures that external users maintain valid access and reduces the risk of prolonged unauthorized access through stale sessions.
Remediation action:
Section titled “Remediation action:”- Sign in to the SharePoint admin center.
- Select Policies > Sharing.
- Under Advanced settings, check Guests must sign in using the same account to which sharing invitations are sent.
- Check People who use a verification code must reauthenticate after this many days and set to 30 days or less.
- Select Save.
Related links
Section titled “Related links”Mito check, based on CISA ScubaGear. Author: Mynster9361. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.