(azuread_conditional_access_policy) Support for disableResilienceDefaults

[ghost]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritise this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritise the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Microsoft has recently added a new session control to Conditional Access Policies called "Resilience defaults", and a new field on Conditional Policies called disableResilienceDefaults. We have a case where we do in fact want to disable them. It would be nice to be able to set that through terraform.

New or Affected Resource(s)

• azuread_conditional_access_policy

Potential Terraform Configuration

resource "azuread_conditional_access_policy" "CA-disable-resilience-defaults" {
  display_name = "Session Policy - Disable resilience defaults"
  state        = "enabledForReportingButNotEnforced"

  conditions { ... }

  session_controls {
    disable_resilience_defaults = true
  }
}

References

• https://learn.microsoft.com/en-us/graph/api/resources/conditionalaccesssessioncontrols?view=graph-rest-1.0
• https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/resilience-defaults

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

[manicminer]

Closed in error