Disable Basic Authentication

Info

ID: MS-M7011
MITRE mitigation: M1042

Disable username/password authentication on administrative interfaces, deployment endpoints, and legacy protocols where possible. Basic authentication is vulnerable to brute-force attacks and credential theft, and should be replaced with more secure authentication methods.

Techniques Addressed by Mitigation

ID	Name	Use
MS-TA7005	Exposed/misconfigured admin interfaces	If possible, turn off user/password authentication on administrative interfaces such as SCM endpoints, function management consoles, and deployment portals.
MS-TA7010	Cloud native terminal	Turn off username/password authentication where possible.
MS-TA7018	Brute force	Remove username/password authentication from deployment endpoints, admin interfaces, and legacy protocols.
MS-TA7026	Event data capture	Turn off basic authentication for log streaming endpoints and diagnostic interfaces.