Policies/NSP-GUEST-MFA-01.psd1
|
@{ Id = 'NSP-GUEST-MFA-01' Name = 'Require MFA for guests and external users' Version = 1 Description = 'Guests and external users (B2B collaboration, direct connect, and others) must complete MFA. Partner technicians signing in through GDAP (service providers) are not included.' Notes = 'New with the module (2026-10-09), from the common baselines. The MFA groups cover members only, so guests had no MFA policy. A guest''s MFA from their home tenant counts only if cross-tenant access settings trust it.' LegacyNames = @('Require multifactor authentication for guest access') DefaultState = 'reportOnly' Users = @{ IncludeGuestsOrExternalUsers = @('internalGuest', 'b2bCollaborationGuest', 'b2bCollaborationMember', 'b2bDirectConnectUser', 'otherExternalUser') ExcludeUsers = @('{BreakGlass}') } Applications = @{ Include = @('All') } Grant = @{ Operator = 'OR' BuiltInControls = @('mfa') } } |