Skip to main content

conditional_access_authentication_strength_policies_usage

Creates, updates, deletes, gets or lists a conditional_access_authentication_strength_policies_usage resource.

Overview

Nameconditional_access_authentication_strength_policies_usage
TypeResource
Identra_id.identity.conditional_access_authentication_strength_policies_usage

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
mfaarray
nonearray

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectauthentication_strength_policy_idAllows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that do not require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
authentication_strength_policy_idstringThe unique identifier of authenticationStrengthPolicy

SELECT examples

Allows the caller to see which Conditional Access policies reference a specified authentication strength policy. The policies are returned in two collections, one containing Conditional Access policies that require an MFA claim and the other containing Conditional Access policies that do not require such a claim. Policies in the former category are restricted in what kinds of changes may be made to them to prevent undermining the MFA requirement of those policies.

SELECT
mfa,
none
FROM entra_id.identity.conditional_access_authentication_strength_policies_usage
WHERE authentication_strength_policy_id = '{{ authentication_strength_policy_id }}' -- required
;