MS.AAD.3.2v1 not accounting for the authentication strength option

[adhilto]

Prerequisites

• This issue has an informative and human-readable title.

ScubaGear Version

Latest from main

Operating System

Windows

PowerShell Version

5.1

M365 Environment and License(s)

GCC

🐛 Summary

ScubaGear does not recognize "Require authentication stregth" for AAD.3.2:

(Note that it does look at auth strength for 3.1)

This is what the provider output looks like if you select "require authentication strength -> passwordless MFA":

What ScubaGear wants for 3.2 is "mfa" to be listed here:

Here's what it looks like if you select "require authentication strength -> multifactor authentication":

Steps to reproduce

Create a conditional access policy that should pass for MS.AAD.3.2v1, except select "require authentication strength" instead of "require multifactor authentication."

Expected behavior

MS.AAD.3.2v1 should pass

Output from Initialize-SCuBA (optional)

No response