Public/Configuration/Baseline/ConditionalAccessPolicies/JyskIT-Baseline-CA-BlockLegacyAuth.json

{
    "conditions": {
      "applications": {
        "includeApplications": [
          "All"
        ]
      },
      "clientAppTypes": [
        "exchangeActiveSync",
        "other"
      ],
      "users": {
        "excludeGroups": [
          "#ReplaceGroup#_JyskIT-Baseline-CA-BlockLegacyAuth_Exclude"
        ],
        "includeUsers": [
          "All"
        ]
      }
    },
    "displayName": "JyskIT-Baseline-CA-BlockLegacyAuth",
    "description": "Block legacy authentication for all users.",
    "grantControls": {
      "operator": "OR",
      "builtInControls": [
        "block"
      ]
    },
    "state": "enabledForReportingButNotEnforced"
}