Microsoft Entra ID must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the application
Part of DISA · Entra ID · User and directory settings · All checks
Invoke-Maester -TestId DISA.V-270209 -IncludePreviewOverview
Section titled “Overview”The Microsoft Entra sign-in page shows the Standard Mandatory DoD Notice and Consent Banner (DISA Microsoft Entra ID STIG, V-270209, CAT II).
DoD information systems must tell every user, before they sign in, that the system is a U.S. Government system, that use is monitored, and that they consent to the terms. In Microsoft Entra ID the banner goes in the Sign-in page text of the default company branding, which appears on the sign-in page of every Microsoft cloud app.
The check reads the sign-in page text and passes when it contains the banner: by default the opening sentence of the full banner, or the short banner (“I’ve read & consent to terms in IS user agreem’t.”) that DoD allows where space is limited. The field holds 1,024 characters at most, so the full banner may not fit. To look for a different text, set RequiredText.
The banner is a DoD requirement. Outside DoD this test fails by design; leave it out of your runs.
Remediation action
Section titled “Remediation action”- In the Microsoft Entra admin center, go to Entra ID > Custom branding > Company branding.
- Edit the Default sign-in experience (or select Customize if there is none yet).
- On the Sign-in form tab, enter the DoD Notice and Consent Banner in Sign-in page text.
- Select Review + save, then Save.
Related links
Section titled “Related links”Details
Section titled “Details”Every attribute of this check
| Field | Value |
|---|---|
| Test ID | DISA.V-270209 |
| Severity | Low |
| Suite | DISA |
| Product | Entra ID |
| Feature | User and directory settings |
| Area | Access control |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| Supports benchmark | DISA Microsoft Entra ID STIG (version V1R2), requirement V-270209 |
| Supports controls | disa-stig-entra-id:V-270209, nist-800-53-r5:AC-8 |
| PowerShell test | Test-MtDisaSignInBanner |
| Services | Graph |
| Lifecycle | Preview |
Source
Section titled “Source”- Test:
tests/disa/Test.DISA.V-270209.ps1 - Documentation:
tests/disa/Test.DISA.V-270209.md