Files
ConditionalAccessBaseline/Config/2025.2.1/ConditionalAccess/CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA.json
T
j0eyv ed6a42b924 2025.2.1
Added CA105 (Phish Resistant MFA for Admins)
2025-01-27 09:53:03 +01:00

118 lines
16 KiB
JSON

{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies/$entity",
"@odata.type": "#microsoft.graph.conditionalAccessPolicy",
"@odata.id": "identity/conditionalAccess/policies(\u00271ccca3dd-93cb-4c14-9ae1-abe557971060\u0027)",
"@odata.editLink": "identity/conditionalAccess/policies(\u00271ccca3dd-93cb-4c14-9ae1-abe557971060\u0027)",
"id": "1ccca3dd-93cb-4c14-9ae1-abe557971060",
"templateId": "a4072ac0-722b-4991-981b-7f9755daef14",
"displayName": "CA400-GuestUsers-IdentityProtection-AnyApp-AnyPlatform-MFA",
"createdDateTime@odata.type": "#DateTimeOffset",
"createdDateTime": "2024-05-24T09:28:08.0239156Z",
"modifiedDateTime@odata.type": "#DateTimeOffset",
"modifiedDateTime": "2024-05-24T10:57:40.9680552Z",
"state@odata.type": "#microsoft.graph.conditionalAccessPolicyState",
"state": "enabled",
"partialEnablementStrategy": null,
"sessionControls": null,
"conditions": {
"@odata.type": "#microsoft.graph.conditionalAccessConditionSet",
"userRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)",
"userRiskLevels": [
],
"signInRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)",
"signInRiskLevels": [
],
"clientAppTypes@odata.type": "#Collection(microsoft.graph.conditionalAccessClientApp)",
"clientAppTypes": [
"all"
],
"platforms": null,
"locations": null,
"times": null,
"deviceStates": null,
"devices": null,
"clientApplications": null,
"applications": {
"@odata.type": "#microsoft.graph.conditionalAccessApplications",
"includeApplications@odata.type": "#Collection(String)",
"includeApplications": [
"All"
],
"excludeApplications@odata.type": "#Collection(String)",
"excludeApplications": [
],
"includeUserActions@odata.type": "#Collection(String)",
"includeUserActions": [
],
"includeAuthenticationContextClassReferences@odata.type": "#Collection(String)",
"includeAuthenticationContextClassReferences": [
],
"applicationFilter": null
},
"users": {
"@odata.type": "#microsoft.graph.conditionalAccessUsers",
"includeUsers@odata.type": "#Collection(String)",
"includeUsers": [
],
"excludeUsers@odata.type": "#Collection(String)",
"excludeUsers": [
],
"includeGroups@odata.type": "#Collection(String)",
"includeGroups": [
],
"excludeGroups@odata.type": "#Collection(String)",
"excludeGroups": [
"2802b872-ccfb-4b29-a9a9-459808dfb11b",
"349156c1-2fb1-4ffa-9cd3-5c4418e24e4c"
],
"includeRoles@odata.type": "#Collection(String)",
"includeRoles": [
],
"excludeRoles@odata.type": "#Collection(String)",
"excludeRoles": [
],
"excludeGuestsOrExternalUsers": null,
"includeGuestsOrExternalUsers": {
"@odata.type": "#microsoft.graph.conditionalAccessGuestsOrExternalUsers",
"guestOrExternalUserTypes@odata.type": "#microsoft.graph.conditionalAccessGuestOrExternalUserTypes",
"guestOrExternalUserTypes": "internalGuest,b2bCollaborationGuest,b2bCollaborationMember,b2bDirectConnectUser,otherExternalUser,serviceProvider",
"externalTenants": {
"@odata.type": "#microsoft.graph.conditionalAccessAllExternalTenants",
"membershipKind@odata.type": "#microsoft.graph.conditionalAccessExternalTenantsMembershipKind",
"membershipKind": "all"
}
}
}
},
"grantControls": {
"@odata.type": "#microsoft.graph.conditionalAccessGrantControls",
"operator": "OR",
"builtInControls@odata.type": "#Collection(microsoft.graph.conditionalAccessGrantControl)",
"builtInControls": [
"mfa"
],
"customAuthenticationFactors@odata.type": "#Collection(String)",
"customAuthenticationFactors": [
],
"termsOfUse@odata.type": "#Collection(String)",
"termsOfUse": [
],
"authenticationStrength@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies(\u00271ccca3dd-93cb-4c14-9ae1-abe557971060\u0027)/grantControls/authenticationStrength/$entity",
"authenticationStrength@odata.associationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u00271ccca3dd-93cb-4c14-9ae1-abe557971060\u0027)/grantControls/authenticationStrength/$ref",
"authenticationStrength@odata.navigationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u00271ccca3dd-93cb-4c14-9ae1-abe557971060\u0027)/grantControls/authenticationStrength",
"authenticationStrength": null
}
}