{
  "id": "cap-spec425",
  "displayName": "Require MFA",
  "state": "enabled",
  "conditions": {
    "users": {
      "includeUsers": ["All"]
    },
    "applications": {
      "includeApplications": ["Office365"]
    },
    "clientAppTypes": ["browser", "mobileAppsAndDesktopClients"],
    "platforms": {
      "includePlatforms": ["windows", "macOS"]
    },
    "locations": {
      "excludeLocations": ["trusted-location"]
    },
    "userRiskLevels": ["high"],
    "signInRiskLevels": ["medium"]
  },
  "grantControls": {
    "operator": "OR",
    "builtInControls": ["mfa"]
  },
  "sessionControls": {
    "signInFrequency": {
      "value": 8,
      "type": "hours",
      "isEnabled": true
    }
  }
}