{ "@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies/$entity", "@odata.type": "#microsoft.graph.conditionalAccessPolicy", "@odata.id": "identity/conditionalAccess/policies(\u0027977083ba-6daf-4860-bdf8-2bc5505a6428\u0027)", "@odata.editLink": "identity/conditionalAccess/policies(\u0027977083ba-6daf-4860-bdf8-2bc5505a6428\u0027)", "id": "977083ba-6daf-4860-bdf8-2bc5505a6428", "templateId": "6364131e-bc4a-47c4-a20b-33492d1fff6c", "displayName": "CA100-Admins-IdentityProtection-AdminPortals-AnyPlatform-MFA", "createdDateTime@odata.type": "#DateTimeOffset", "createdDateTime": "2024-05-24T09:27:58.5579287Z", "modifiedDateTime@odata.type": "#DateTimeOffset", "modifiedDateTime": "2026-06-08T18:08:09.0776786Z", "state@odata.type": "#microsoft.graph.conditionalAccessPolicyState", "state": "enabled", "deletedDateTime": null, "partialEnablementStrategy": null, "sessionControls": null, "conditions": { "@odata.type": "#microsoft.graph.conditionalAccessConditionSet", "userRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)", "userRiskLevels": [ ], "signInRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)", "signInRiskLevels": [ ], "clientAppTypes@odata.type": "#Collection(microsoft.graph.conditionalAccessClientApp)", "clientAppTypes": [ "all" ], "platforms": null, "locations": null, "times": null, "deviceStates": null, "devices": null, "clientApplications": null, "agents": null, "applications": { "@odata.type": "#microsoft.graph.conditionalAccessApplications", "includeApplications@odata.type": "#Collection(String)", "includeApplications": [ "MicrosoftAdminPortals" ], "excludeApplications@odata.type": "#Collection(String)", "excludeApplications": [ ], "includeUserActions@odata.type": "#Collection(String)", "includeUserActions": [ ], "includeAuthenticationContextClassReferences@odata.type": "#Collection(String)", "includeAuthenticationContextClassReferences": [ ], "applicationFilter": null }, "users": { "@odata.type": "#microsoft.graph.conditionalAccessUsers", "includeUsers@odata.type": "#Collection(String)", "includeUsers": [ ], "excludeUsers@odata.type": "#Collection(String)", "excludeUsers": [ ], "includeGroups@odata.type": "#Collection(String)", "includeGroups": [ ], "excludeGroups@odata.type": "#Collection(String)", "excludeGroups": [ "2802b872-ccfb-4b29-a9a9-459808dfb11b", "70899f87-a5ba-4145-8bd5-2230db5dbbff" ], "includeRoles@odata.type": "#Collection(String)", "includeRoles": [ "62e90394-69f5-4237-9190-012177145e10", "194ae4cb-b126-40b2-bd5b-6091b380977d", "f28a1f50-f6e7-4571-818b-6a12f2af6b6c", "29232cdf-9323-42fd-ade2-1d097af3e4de", "b1be1c3e-b65d-4f19-8427-f6fa0d97feb9", "729827e3-9c14-49f7-bb1b-9608f156bbb8", "b0f54661-2d74-4c50-afa3-1ec803f12efe", "fe930be7-5e62-47db-91af-98c3a49a38b1", "c4e39bd9-1100-46d3-8c65-fb160da0071f", "9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3", "158c047a-c907-4556-b7ef-446551a6b5f7", "966707d0-3269-4727-9be2-8c3a10f19b9d", "7be44c8a-adaf-4e2a-84d6-ab2649e08a13", "e8611ab8-c189-46e8-94e1-60213ab1f814", "f2ef992c-3afb-46b9-b7cf-a126ee74c451", "3a2c62db-5318-420d-8d74-23affee5d9d5", "d2562ede-74db-457e-a7b6-544e236ebb61", "db506228-d27e-4b7d-95e5-295956d6615f", "6b942400-691f-4bf0-9d12-d8a254a2baf5", "e93e3737-fa85-474a-aee4-7d3fb86510f3", "b6a27b2b-f905-4b2e-81b5-0d90e0ef1fdb", "1707125e-0aa2-4d4d-8655-a7c786c76a25", "69091246-20e8-4a56-aa4d-066075b2a7a8", "11451d60-acb2-45eb-a7d6-43d0f0125c13" ], "excludeRoles@odata.type": "#Collection(String)", "excludeRoles": [ ], "includeGuestsOrExternalUsers": null, "excludeGuestsOrExternalUsers": null } }, "grantControls": { "@odata.type": "#microsoft.graph.conditionalAccessGrantControls", "operator": "OR", "builtInControls@odata.type": "#Collection(microsoft.graph.conditionalAccessGrantControl)", "builtInControls": [ ], "customAuthenticationFactors@odata.type": "#Collection(String)", "customAuthenticationFactors": [ ], "termsOfUse@odata.type": "#Collection(String)", "termsOfUse": [ ], "authenticationStrength@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies(\u0027977083ba-6daf-4860-bdf8-2bc5505a6428\u0027)/grantControls/authenticationStrength/$entity", "authenticationStrength@odata.associationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027977083ba-6daf-4860-bdf8-2bc5505a6428\u0027)/grantControls/authenticationStrength/$ref", "authenticationStrength@odata.navigationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027977083ba-6daf-4860-bdf8-2bc5505a6428\u0027)/grantControls/authenticationStrength", "authenticationStrength": { "@odata.type": "#microsoft.graph.authenticationStrengthPolicy", "@odata.id": "identity/conditionalAccess/policies(\u0027977083ba-6daf-4860-bdf8-2bc5505a6428\u0027)/grantControls/authenticationStrength", "@odata.editLink": "identity/conditionalAccess/policies(\u0027977083ba-6daf-4860-bdf8-2bc5505a6428\u0027)/grantControls/authenticationStrength", "id": "00000000-0000-0000-0000-000000000002", "createdDateTime@odata.type": "#DateTimeOffset", "createdDateTime": "2021-12-01T08:00:00Z", "modifiedDateTime@odata.type": "#DateTimeOffset", "modifiedDateTime": "2021-12-01T08:00:00Z", "displayName": "Multifactor authentication", "description": "Combinations of methods that satisfy strong authentication, such as a password + SMS", "policyType@odata.type": "#microsoft.graph.authenticationStrengthPolicyType", "policyType": "builtIn", "requirementsSatisfied@odata.type": "#microsoft.graph.authenticationStrengthRequirements", "requirementsSatisfied": "mfa", "allowedCombinations@odata.type": "#Collection(microsoft.graph.authenticationMethodModes)", "allowedCombinations": [ "windowsHelloForBusiness", "fido2", "x509CertificateMultiFactor", "deviceBasedPush", "temporaryAccessPassOneTime", "temporaryAccessPassMultiUse", "password,microsoftAuthenticatorPush", "password,softwareOath", "password,hardwareOath", "password,sms", "password,voice", "federatedMultiFactor", "microsoftAuthenticatorPush,federatedSingleFactor", "softwareOath,federatedSingleFactor", "hardwareOath,federatedSingleFactor", "sms,federatedSingleFactor", "voice,federatedSingleFactor" ], "combinationConfigurations@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies(\u0027977083ba-6daf-4860-bdf8-2bc5505a6428\u0027)/grantControls/authenticationStrength/combinationConfigurations", "combinationConfigurations@odata.associationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027977083ba-6daf-4860-bdf8-2bc5505a6428\u0027)/grantControls/authenticationStrength/combinationConfigurations/$ref", "combinationConfigurations@odata.navigationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027977083ba-6daf-4860-bdf8-2bc5505a6428\u0027)/grantControls/authenticationStrength/combinationConfigurations", "combinationConfigurations": [ ], "#microsoft.graph.updateAllowedCombinations": { "title": "microsoft.graph.updateAllowedCombinations", "target": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027977083ba-6daf-4860-bdf8-2bc5505a6428\u0027)/grantControls/authenticationStrength/microsoft.graph.updateAllowedCombinations" }, "#microsoft.graph.usage": { "title": "microsoft.graph.usage", "target": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027977083ba-6daf-4860-bdf8-2bc5505a6428\u0027)/grantControls/authenticationStrength/microsoft.graph.usage" } } }, "#microsoft.graph.restore": { "title": "microsoft.graph.restore", "target": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027977083ba-6daf-4860-bdf8-2bc5505a6428\u0027)/microsoft.graph.restore" } }