EIDSCA.AT01: Authentication Method - Temporary Access Pass - State.
| ID | EIDSCA.AT01 |
| Severity | Medium |
| Suite | EIDSCA |
| Product | Entra ID |
| Feature | Authentication methods |
| Security area | Authentication |
| Resource type | Tenant |
| User impact of fixing | Low |
| Effort to fix | Low |
| Reads from | Microsoft Graph |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Whether the Temporary Access Pass is enabled in the tenant.
Use Temporary Access Pass for secure onboarding users (initial password replacement) and enforce MFA for registering security information in Conditional Access Policy.
Test script
Section titled “Test script”https://graph.microsoft.com/beta/policies/authenticationMethodsPolicy/authenticationMethodConfigurations('TemporaryAccessPass').state -eq 'enabled'Remediation action
Section titled “Remediation action”Microsoft Learn - Enable Temporary Access Pass
Related links
Section titled “Related links”- Open in Graph Explorer
- temporaryAccessPassAuthenticationMethodConfiguration resource type - Microsoft Graph v1.0 | Microsoft Learn
Mito check, based on EIDSCA. Author: Cloud-Architekt. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.