Fix functional tests that are failing in Entra ID/Defender

[mitchelbaker-cisa]

Prerequisites

• This issue has an informative and human-readable title.

ScubaGear Version

v1.6 (latest main)

Operating System

Windows runner, windows-latest

PowerShell Version

5.1

M365 Environment and License(s)

gcc/gcc high/commercial

🐛 Summary

Entra ID functional tests are failing.

Same issue with Defender.

Steps to reproduce

1. Look at functional test runs here: https://github.com/cisagov/ScubaGear/actions/workflows/test_production_function.yaml

Expected behavior

SetConditions should not throw an exception and all test plans should pass.

[mitchelbaker-cisa]

We were originally accessing CAP settings with the following dot notation, GrantControls.AuthenticationStrength.AllowedCombinations which was causing Entra ID functional tests to fail. Changing them to the syntax below resolves remaining Entra ID test failures:

[mitchelbaker-cisa]

Defender tests are failing because (Get-UnifiedGroup)[0].Alias assumes an array with at least one entry is returned. In some cases the commandlet does not return an array which results in a "Cannot index into a null array" error.