Blocking Legacy Auth - Githubissues

AlexFilipin / ConditionalAccess

MIT License

274 stars 72 forks source link

Closed DeanGross closed 2 years ago

DeanGross commented 2 years ago

I don't see any policies for blocking legacy auth. Is there a reason that this is was not included?

AlexFilipin commented 2 years ago

It's included in all policy sets, however split up:

300 - - Attack surface reduction - All apps: Block access When using other clients
301 - - Attack surface reduction - All apps: Block access When using active sync

This allows you to block a first subset of legacy authN while you are working on the other

DeanGross commented 2 years ago

Awesome, thanks, I totally missed that.