Policies/NSP-INTUNE-MFA-02.psd1
|
@{ Id = 'NSP-INTUNE-MFA-02' Name = 'Require MFA for Apple Business Manager' Version = 1 Description = 'Members of the EnableMFA and MFACatchAll groups must complete MFA for Apple Business Manager, re-prompted every 30 days. The Apple Business Manager service principal must already exist in the tenant.' Notes = 'Converted from Legacy/Policies/Intune_ABMPolicy.ps1.' LegacyNames = @('Intune - ABM Policy') DefaultState = 'reportOnly' Users = @{ IncludeGroups = @('{Group:EnableMFA}', '{Group:MFACatchAll}') ExcludeUsers = @('{BreakGlass}', '{ServiceAccounts}') } Applications = @{ Include = @('{App:Apple Business Manager}') } Grant = @{ Operator = 'OR' BuiltInControls = @('mfa') } Session = @{ SignInFrequency = @{ Value = 30; Type = 'days' } } } |