Description:
Verifies that Microsoft Entra Security Defaults are enabled. This check is intended for tenants that do not use Conditional Access — it confirms the baseline identity protections are switched on.
Why:
Security Defaults provides baseline identity protection by requiring multifactor authentication registration, protecting privileged actions, and blocking legacy authentication. It is recommended for tenants that do not use Conditional Access.
Configured: Security Defaults are enabled.
Not Configured: Security Defaults are not enabled.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Identity
Microsoft Licensing: Works with Basic licensing
Remediation in Augmentt: Configure directly in Augmentt (Configure tab); Guided remediation steps (Instructions tab)
Compliance Frameworks: None mapped for this check.
Microsoft documentation:
IMPORTANT:
Security Defaults and Conditional Access are mutually exclusive. Use this check for tenants without Conditional Access, and the companion Security Defaults is disabled check for tenants that rely on Conditional Access. Only one of the two should be enabled in a given posture template.