Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[EntraID workflow] Conditional Access Policy: Authentication Context missed while exporting or monitoring for configuration drift #3813

Closed
ghost opened this issue Oct 19, 2023 · 1 comment · Fixed by #3816 or #3833
Assignees
Labels
Enhancement New feature or request Entra ID

Comments

@ghost
Copy link

ghost commented Oct 19, 2023

Description of the issue

While exporting EntraID Conditional Access Polices, configuration name "Authentication Context" is missing.
Please enhance the EntraID workflow with mentioned feature.

image

AADConditionalAccessPolicy "AADConditionalAccessPolicy-PoC DSC -AuthContext policy"
{
ApplicationEnforcedRestrictionsIsEnabled = $False;
ApplicationId = $ConfigurationData.NonNodeData.ApplicationId;
ApplicationSecret = New-Object System.Management.Automation.PSCredential ('ApplicationSecret', (ConvertTo-SecureString $ConfigurationData.NonNodeData.ApplicationSecret -AsPlainText -Force));
BuiltInControls = @("mfa");
ClientAppTypes = @("all");
CloudAppSecurityIsEnabled = $False;
CloudAppSecurityType = "";
CustomAuthenticationFactors = @();
DeviceFilterRule = "";
DisplayName = "PoC DSC -AuthContext policy";
Ensure = "Present";
ExcludeApplications = @();
ExcludeExternalTenantsMembers = @();
ExcludeExternalTenantsMembershipKind = "";
ExcludeGroups = @();
ExcludeLocations = @();
ExcludePlatforms = @();
ExcludeRoles = @();
ExcludeUsers = @();
GrantControlOperator = "OR";
Id = "3586310f-e00d-4603-b039-2afc72daee7f";
IncludeApplications = @();
IncludeExternalTenantsMembers = @();
IncludeExternalTenantsMembershipKind = "";
IncludeGroups = @();
IncludeLocations = @();
IncludePlatforms = @();
IncludeRoles = @();
IncludeUserActions = @();
IncludeUsers = @("None");
PersistentBrowserIsEnabled = $False;
PersistentBrowserMode = "";
SignInFrequencyIsEnabled = $False;
SignInFrequencyType = "";
SignInRiskLevels = @();
State = "disabled";
TenantId = $OrganizationName;
UserRiskLevels = @();
}
}
}

Microsoft 365 DSC Version

1.23.607.1

Which workloads are affected

Azure Active Directory

The DSC configuration

No response

Verbose logs showing the problem

No response

Environment Information + PowerShell Version

No response

@ghost
Copy link
Author

ghost commented Oct 19, 2023

Label: Enhancement

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Enhancement New feature or request Entra ID
Projects
None yet
1 participant