{
  "id": "cap-spec425",
  "displayName": "Require MFA",
  "state": "enabled",
  "createdDateTime": "2026-07-01T10:00:00Z",
  "modifiedDateTime": "2026-07-01T11:00:00Z",
  "conditions": {
    "users": {
      "includeUsers": ["All"]
    },
    "applications": {
      "includeApplications": ["Office365"]
    },
    "clientAppTypes": ["browser"]
  },
  "grantControls": {
    "operator": "OR",
    "builtInControls": ["mfa"]
  },
  "sessionControls": {
    "signInFrequency": {
      "value": 8,
      "type": "hours",
      "isEnabled": true
    }
  }
}