Public/Configuration/Baseline/ConditionalAccessPolicies/JyskIT-Baseline-CA-BlockExternalSharedUser.json

{
  "conditions": {
      "applications": {
          "includeApplications": [
              "All"
          ]
      },
      "users": {
          "includeGroups": [
              "#ReplaceGroup#_JyskIT-Baseline-SEC-SharedUsers"
          ]
      },
      "locations": {
          "includeLocations": [
              "All"
          ],
          "excludeLocations": [
              "AllTrusted"
          ]
      },
      "clientAppTypes": [
          "all"
      ]
  },
  "displayName": "JyskIT-Baseline-CA-BlockExternalSharedUser",
  "description": "Blocks external sign-in for all Shared User Accounts.",
  "grantControls": {
      "operator": "AND",
      "builtInControls": [
          "block"
      ]
  },
  "state": "enabled"
}