Summary: 

High value/risk users are required to use MS Authenticator or a YubiKey for MFA authentication.  Login policy will prevent them from using SMS or voice. 

High value/risk users are defined as those users that have access to sensitive information such as, but not limited to, personnel data, financial data, legal data, and donor data. This includes, but is not limited to, all Salvation Army officers, finance teams, human resource teams, donor teams, risk management teams, information technology teams, etc. 

Expectations for IT Teams: 

Populate command appropriate minute group, CMDMinute32-11. Complete by Sept. 9.  (CMD= the command’s 3 letter acronym ARC, CFO, KWM, THQ…)  To edit the group, go to https://portal.azure.com and login with your admin credentials. 

Communicate the impending change and implementation date to command. 

Assist with the acquisition & configuration of Yubikey 5 devices as needed. (Nano devices are recommended.) 

Expectations for Azure Admins: 

Manage compromised user accounts group, USCMinute32-11c. 

Add all command minute groups to the policy on Sept. 9. 

Add the four Active Officer Groups to the USCMinute32-11 group on Sept 9. 