controls/learn-more.json

{
  "_description": "learnMore reference URLs for M365-Assess checks. Local M365-Assess overlay — not synced from CheckID.",
  "checks": {
    "CA-LEGACYAUTH-001": "https://learn.microsoft.com/en-us/entra/identity/conditional-access/block-legacy-authentication",
    "CA-MFA-ADMIN-001": "https://learn.microsoft.com/en-us/entra/identity/conditional-access/howto-conditional-access-policy-admin-mfa",
    "CA-MFA-ALL-001": "https://learn.microsoft.com/en-us/entra/identity/conditional-access/howto-conditional-access-policy-all-users-mfa",
    "CA-PHISHRES-001": "https://learn.microsoft.com/en-us/entra/identity/conditional-access/howto-conditional-access-policy-authentication-strength",
    "CA-SIGNINRISK-001": "https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-risk-policies",
    "CA-SIGNINRISK-002": "https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-risk-policies",
    "CA-USERRISK-001": "https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-risk-policies",
    "ENTRA-ADMIN-004": "https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-phishingresistant-authenticator-admin",
    "ENTRA-APPREG-004": "https://learn.microsoft.com/en-us/entra/identity-platform/reply-url",
    "ENTRA-AUTHMETHOD-001": "https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-methods-manage",
    "ENTRA-AUTHMETHOD-002": "https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-email-otp",
    "ENTRA-AUTHMETHOD-003": "https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-mfa-number-match",
    "ENTRA-AUTHMETHOD-004": "https://learn.microsoft.com/en-us/entra/identity/authentication/concept-system-preferred-multifactor-authentication",
    "ENTRA-BREAKGLASS-001": "https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/security-emergency-access",
    "ENTRA-CA-001": "https://learn.microsoft.com/en-us/entra/identity/conditional-access/block-legacy-authentication",
    "ENTRA-CLOUDADMIN-001": "https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/best-practices",
    "ENTRA-CLOUDADMIN-002": "https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/best-practices",
    "ENTRA-ENTAPP-003": "https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/manage-application-permissions",
    "ENTRA-ENTAPP-008": "https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/managed-identity-best-practice-recommendations",
    "ENTRA-ENTAPP-010": "https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/manage-application-permissions",
    "ENTRA-ENTAPP-015": "https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/apps-create-use-applications-overview",
    "ENTRA-ENTAPP-016": "https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/manage-application-permissions",
    "ENTRA-MFA-001": "https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-howitworks",
    "ENTRA-PERUSER-001": "https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-userstates",
    "EXO-AUTH-001": "https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/enable-or-disable-modern-authentication-in-exchange-online",
    "EXO-AUTH-002": "https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/authenticated-client-smtp-submission",
    "INTUNE-WIPEAUDIT-001": "https://learn.microsoft.com/en-us/mem/intune/remote-actions/remote-actions-audit",
    "POWERBI-AUTH-001": "https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-portal-integration",
    "POWERBI-AUTH-002": "https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-portal-integration",
    "POWERBI-AUTH-003": "https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-portal-integration",
    "SPO-AUTH-001": "https://learn.microsoft.com/en-us/sharepoint/control-access-from-unmanaged-devices"
  }
}