Azure-AppService-Authentication-Enabled
Severity: High
Description: This control ensures that App Service Authentication is set on Azure App Service. If an anonymous request is received from a browser, App Service will redirect to a logon page. To handle the logon process, a choice from a set of identity providers can be made, or a custom authentication mechanism can be implemented.
Remediation Steps:
Perform following to update App Service configuration:
Login to Azure Portal using https://portal.azure.com.
Go to App Services.
Click on affected Web App.
Set App Service Authentication to On
Choose other parameters as per your requirement
Click on Save .
Important:
Reference:
Azure Foundations Benchmark v1.3.0 - 02-01-2021 : Recommendation #9.1
Â
Blue Hexagon Proprietary