MT.1015: At least one Conditional Access policy is configured to block access for unknown or unsupported device platforms.
| ID | MT.1015 |
| Severity | Medium |
| Suite | Mito |
| Product | Entra ID |
| Feature | Conditional Access |
| Security area | Access control |
| Resource type | Tenant |
| User impact of fixing | Medium |
| Effort to fix | Low |
| Framework controls | nist-800-53-r5:AC-2(11) Account Management | Usage Conditionsnist-800-53-r5:CM-7 Least Functionality |
| MITRE ATT&CK | T1078.004 |
| Reads from | Microsoft Graph |
| Licence needed | AAD_PREMIUM |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Microsoft recommends blocking access for unknown or unsupported device platforms.
Learn more: https://learn.microsoft.com/entra/identity/conditional-access/howto-policy-unknown-unsupported-device
Remediation action
Section titled “Remediation action”Review the configuration described above.
Mito check. Author: f-bader. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.