mirror of
https://github.com/j0eyv/ConditionalAccessBaseline.git
synced 2026-09-28 18:35:38 +02:00
159 lines
26 KiB
JSON
159 lines
26 KiB
JSON
{
|
|
"@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies/$entity",
|
|
"@odata.type": "#microsoft.graph.conditionalAccessPolicy",
|
|
"@odata.id": "identity/conditionalAccess/policies(\u0027d2cebefb-fc77-4986-8890-4fe511825ee7\u0027)",
|
|
"@odata.editLink": "identity/conditionalAccess/policies(\u0027d2cebefb-fc77-4986-8890-4fe511825ee7\u0027)",
|
|
"id": "d2cebefb-fc77-4986-8890-4fe511825ee7",
|
|
"templateId": "76c03f19-ea37-4656-a772-a183b4ddb81d",
|
|
"displayName": "CA105-Admins-IdentityProtection-AnyApp-AnyPlatform-PhishingResistantMFA",
|
|
"createdDateTime@odata.type": "#DateTimeOffset",
|
|
"createdDateTime": "2025-01-27T07:20:59.2720129Z",
|
|
"modifiedDateTime@odata.type": "#DateTimeOffset",
|
|
"modifiedDateTime": "2025-01-27T08:38:56.9875646Z",
|
|
"state@odata.type": "#microsoft.graph.conditionalAccessPolicyState",
|
|
"state": "enabled",
|
|
"partialEnablementStrategy": null,
|
|
"sessionControls": null,
|
|
"conditions": {
|
|
"@odata.type": "#microsoft.graph.conditionalAccessConditionSet",
|
|
"userRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)",
|
|
"userRiskLevels": [
|
|
|
|
],
|
|
"signInRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)",
|
|
"signInRiskLevels": [
|
|
|
|
],
|
|
"clientAppTypes@odata.type": "#Collection(microsoft.graph.conditionalAccessClientApp)",
|
|
"clientAppTypes": [
|
|
"all"
|
|
],
|
|
"platforms": null,
|
|
"locations": null,
|
|
"times": null,
|
|
"deviceStates": null,
|
|
"devices": null,
|
|
"clientApplications": null,
|
|
"applications": {
|
|
"@odata.type": "#microsoft.graph.conditionalAccessApplications",
|
|
"includeApplications@odata.type": "#Collection(String)",
|
|
"includeApplications": [
|
|
"All"
|
|
],
|
|
"excludeApplications@odata.type": "#Collection(String)",
|
|
"excludeApplications": [
|
|
"14d82eec-204b-4c2f-b7e8-296a70dab67e"
|
|
],
|
|
"includeUserActions@odata.type": "#Collection(String)",
|
|
"includeUserActions": [
|
|
|
|
],
|
|
"includeAuthenticationContextClassReferences@odata.type": "#Collection(String)",
|
|
"includeAuthenticationContextClassReferences": [
|
|
|
|
],
|
|
"applicationFilter": null
|
|
},
|
|
"users": {
|
|
"@odata.type": "#microsoft.graph.conditionalAccessUsers",
|
|
"includeUsers@odata.type": "#Collection(String)",
|
|
"includeUsers": [
|
|
|
|
],
|
|
"excludeUsers@odata.type": "#Collection(String)",
|
|
"excludeUsers": [
|
|
|
|
],
|
|
"includeGroups@odata.type": "#Collection(String)",
|
|
"includeGroups": [
|
|
|
|
],
|
|
"excludeGroups@odata.type": "#Collection(String)",
|
|
"excludeGroups": [
|
|
"2802b872-ccfb-4b29-a9a9-459808dfb11b",
|
|
"ab2172b3-67e0-4b55-b538-21467c8ebd45"
|
|
],
|
|
"includeRoles@odata.type": "#Collection(String)",
|
|
"includeRoles": [
|
|
"62e90394-69f5-4237-9190-012177145e10",
|
|
"194ae4cb-b126-40b2-bd5b-6091b380977d",
|
|
"f28a1f50-f6e7-4571-818b-6a12f2af6b6c",
|
|
"29232cdf-9323-42fd-ade2-1d097af3e4de",
|
|
"b1be1c3e-b65d-4f19-8427-f6fa0d97feb9",
|
|
"729827e3-9c14-49f7-bb1b-9608f156bbb8",
|
|
"b0f54661-2d74-4c50-afa3-1ec803f12efe",
|
|
"fe930be7-5e62-47db-91af-98c3a49a38b1",
|
|
"c4e39bd9-1100-46d3-8c65-fb160da0071f",
|
|
"9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3",
|
|
"158c047a-c907-4556-b7ef-446551a6b5f7",
|
|
"966707d0-3269-4727-9be2-8c3a10f19b9d",
|
|
"7be44c8a-adaf-4e2a-84d6-ab2649e08a13",
|
|
"e8611ab8-c189-46e8-94e1-60213ab1f814",
|
|
"f2ef992c-3afb-46b9-b7cf-a126ee74c451",
|
|
"3a2c62db-5318-420d-8d74-23affee5d9d5"
|
|
],
|
|
"excludeRoles@odata.type": "#Collection(String)",
|
|
"excludeRoles": [
|
|
|
|
],
|
|
"includeGuestsOrExternalUsers": null,
|
|
"excludeGuestsOrExternalUsers": null
|
|
}
|
|
},
|
|
"grantControls": {
|
|
"@odata.type": "#microsoft.graph.conditionalAccessGrantControls",
|
|
"operator": "OR",
|
|
"builtInControls@odata.type": "#Collection(microsoft.graph.conditionalAccessGrantControl)",
|
|
"builtInControls": [
|
|
|
|
],
|
|
"customAuthenticationFactors@odata.type": "#Collection(String)",
|
|
"customAuthenticationFactors": [
|
|
|
|
],
|
|
"termsOfUse@odata.type": "#Collection(String)",
|
|
"termsOfUse": [
|
|
|
|
],
|
|
"authenticationStrength@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies(\u0027d2cebefb-fc77-4986-8890-4fe511825ee7\u0027)/grantControls/authenticationStrength/$entity",
|
|
"authenticationStrength@odata.associationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027d2cebefb-fc77-4986-8890-4fe511825ee7\u0027)/grantControls/authenticationStrength/$ref",
|
|
"authenticationStrength@odata.navigationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027d2cebefb-fc77-4986-8890-4fe511825ee7\u0027)/grantControls/authenticationStrength",
|
|
"authenticationStrength": {
|
|
"@odata.type": "#microsoft.graph.authenticationStrengthPolicy",
|
|
"@odata.id": "identity/conditionalAccess/policies(\u0027d2cebefb-fc77-4986-8890-4fe511825ee7\u0027)/grantControls/authenticationStrength",
|
|
"@odata.editLink": "identity/conditionalAccess/policies(\u0027d2cebefb-fc77-4986-8890-4fe511825ee7\u0027)/grantControls/authenticationStrength",
|
|
"id": "00000000-0000-0000-0000-000000000004",
|
|
"createdDateTime@odata.type": "#DateTimeOffset",
|
|
"createdDateTime": "2021-12-01T08:00:00Z",
|
|
"modifiedDateTime@odata.type": "#DateTimeOffset",
|
|
"modifiedDateTime": "2021-12-01T08:00:00Z",
|
|
"displayName": "Phishing-resistant MFA",
|
|
"description": "Phishing-resistant, Passwordless methods for the strongest authentication, such as a FIDO2 security key",
|
|
"policyType@odata.type": "#microsoft.graph.authenticationStrengthPolicyType",
|
|
"policyType": "builtIn",
|
|
"requirementsSatisfied@odata.type": "#microsoft.graph.authenticationStrengthRequirements",
|
|
"requirementsSatisfied": "mfa",
|
|
"allowedCombinations@odata.type": "#Collection(microsoft.graph.authenticationMethodModes)",
|
|
"allowedCombinations": [
|
|
"windowsHelloForBusiness",
|
|
"fido2",
|
|
"x509CertificateMultiFactor"
|
|
],
|
|
"combinationConfigurations@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies(\u0027d2cebefb-fc77-4986-8890-4fe511825ee7\u0027)/grantControls/authenticationStrength/combinationConfigurations",
|
|
"combinationConfigurations@odata.associationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027d2cebefb-fc77-4986-8890-4fe511825ee7\u0027)/grantControls/authenticationStrength/combinationConfigurations/$ref",
|
|
"combinationConfigurations@odata.navigationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027d2cebefb-fc77-4986-8890-4fe511825ee7\u0027)/grantControls/authenticationStrength/combinationConfigurations",
|
|
"combinationConfigurations": [
|
|
|
|
],
|
|
"#microsoft.graph.updateAllowedCombinations": {
|
|
"title": "microsoft.graph.updateAllowedCombinations",
|
|
"target": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027d2cebefb-fc77-4986-8890-4fe511825ee7\u0027)/grantControls/authenticationStrength/microsoft.graph.updateAllowedCombinations"
|
|
},
|
|
"#microsoft.graph.usage": {
|
|
"title": "microsoft.graph.usage",
|
|
"target": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027d2cebefb-fc77-4986-8890-4fe511825ee7\u0027)/grantControls/authenticationStrength/microsoft.graph.usage"
|
|
}
|
|
}
|
|
}
|
|
}
|