AADAuthenticationStrengthPolicy¶
Parameters¶
Parameter | Attribute | DataType | Description | Allowed Values |
---|---|---|---|---|
DisplayName | Key | String | The name of the policy. | |
Description | Write | String | A description of the policy. | |
Id | Write | String | The unique identifier of the policy. | |
AllowedCombinations | Write | StringArray[] | The authentication method combinations allowed by this authentication strength policy. The possible values of this flagged enum are: password, voice, hardwareOath, softwareOath, sms, fido2, windowsHelloForBusiness, microsoftAuthenticatorPush, deviceBasedPush, temporaryAccessPassOneTime, temporaryAccessPassMultiUse, email, x509CertificateSingleFactor, x509CertificateMultiFactor, federatedSingleFactor, federatedMultiFactor, unknownFutureValue. | password , voice , hardwareOath , softwareOath , sms , fido2 , windowsHelloForBusiness , microsoftAuthenticatorPush , deviceBasedPush , temporaryAccessPassOneTime , temporaryAccessPassMultiUse , email , x509CertificateSingleFactor , x509CertificateMultiFactor , federatedSingleFactor , federatedMultiFactor , unknownFutureValue |
Ensure | Write | String | Present ensures the policy exists, absent ensures it is removed. | Present , Absent |
Credential | Write | PSCredential | Credentials of the Admin | |
ApplicationId | Write | String | Id of the Azure Active Directory application to authenticate with. | |
TenantId | Write | String | Id of the Azure Active Directory tenant used for authentication. | |
ApplicationSecret | Write | PSCredential | Secret of the Azure Active Directory tenant used for authentication. | |
CertificateThumbprint | Write | String | Thumbprint of the Azure Active Directory application's authentication certificate to use for authentication. | |
ManagedIdentity | Write | Boolean | Managed ID being used for authentication. |
Description¶
Azure AD Authentication Strength Policy
Permissions¶
Microsoft Graph¶
To authenticate with the Microsoft Graph API, this resource required the following permissions:
Delegated permissions¶
-
Read
- Policy.ReadWrite.AuthenticationMethod
-
Update
- Policy.ReadWrite.AuthenticationMethod
Application permissions¶
-
Read
- Policy.ReadWrite.AuthenticationMethod
-
Update
- Policy.ReadWrite.AuthenticationMethod
Examples¶
Example 1¶
This example is used to test new resources and showcase the usage of new resources being worked on. It is not meant to use as a production baseline.
Configuration Example
{
Import-DscResource -ModuleName Microsoft365DSC
Node localhost
{
AADAuthenticationStrengthPolicy "AADAuthenticationStrengthPolicy-Example"
{
AllowedCombinations = @("windowsHelloForBusiness","fido2","x509CertificateMultiFactor","deviceBasedPush");
Description = "This is an example";
DisplayName = "Example";
Ensure = "Present";
Credential = $Credscredential;
}
}
}