GWS.COMMONCONTROLS.1.1 does not check if MFA is allowed

[adhilto]

🐛 Summary

There are three settings 1.1 depends on:

Currently the rego just checks 2 & 3.

What's wrong? Please be specific.

To reproduce

Disallow MFA but don't change the other values.

Expected behavior

All three items get checked.