MT.1018: At least one Conditional Access policy is configured to enforce sign-in frequency for non-corporate devices.
| ID | MT.1018 |
| Severity | Medium |
| Suite | Mito |
| Product | Entra ID |
| Feature | Conditional Access |
| Security area | Authentication |
| Resource type | Tenant |
| User impact of fixing | Medium |
| Effort to fix | Low |
| Framework controls | nist-800-53-r5:IA-11 Re-authenticationnist-800-53-r5:AC-12 Session Termination |
| MITRE ATT&CK | T1539, T1550.004 |
| Reads from | Microsoft Graph |
| Licence needed | AAD_PREMIUM |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Sign-in frequency Conditional Access policy can be helpful to minimize the risk of data leakage from a shared device.
Learn more: https://aka.ms/CATemplatesBrowserSession
Remediation action
Section titled “Remediation action”Review the configuration described above.
Mito check. Author: f-bader. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.