Information
Require administrators to register third-party applications.
Rationale:
It is recommended to let administrator register custom-developed applications. This ensures that the application undergoes a security review before exposing active directory data to it.
Impact:
This might create additional requests that administrators need to fulfill quite often.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
From Azure Console
Go to Azure Active Directory
Go to Users
Go to User settings
Set Users can register applications to No
Default Value:
By default, Users can register applications is set to Yes.