EXT-02: Require MFA for Guest Users

EXT-02 is a security control that guest accounts often have weaker security than internal accounts. requiring mfa for guests ensures external collaborators meet the same authentication standards as your employees. It requires that guest users are included in mfa conditional access policies and guests must complete mfa on every sign-in, trust settings do not exempt guest mfa requirements.

Guest accounts often have weaker security than internal accounts. Requiring MFA for guests ensures external collaborators meet the same authentication standards as your employees.

TrueConfig provides one-click remediation for EXT-02. Ensures Conditional Access MFA policies include guest users

This control can be implemented with any Microsoft 365 subscription, including free Azure AD.

EXT-02 is included in the TrueConfig Recommended Secure baseline (Level 1). This is the foundation level suitable for most organizations.