Policies/NSP-BASE-MFA-01.psd1
|
@{ Id = 'NSP-BASE-MFA-01' Name = 'Require MFA from non-trusted locations' Version = 1 Description = 'Members of the EnableMFA group must complete MFA when signing in from outside trusted locations.' Notes = 'Converted from Legacy/Policies/BASE_RequireMFA_NonTrustedLocations.ps1.' LegacyNames = @('Require MFA from non-trusted locations') DefaultState = 'reportOnly' Users = @{ IncludeGroups = @('{Group:EnableMFA}') ExcludeUsers = @('{BreakGlass}', '{ServiceAccounts}') } Applications = @{ Include = @('All') } Locations = @{ Include = @('All') Exclude = @('AllTrusted') } ClientAppTypes = @('all') Grant = @{ Operator = 'OR' BuiltInControls = @('mfa') } } |