authenticationCombinationConfiguration customisation missing from azuread_authentication_strength_policy

[sandra-bee]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritise this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritise the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

When creating a custom authentication strength, some of the authentication methods have advanced options that are configurable, e.g. for Passkeys (FIDO2), you can add allowed AAGUIDs. The resource that allows this customisation (authenticationCombinationConfiguration) is available in the Microsoft Graph REST API v1.0, but this functionality is not available in Terraform.

New or Affected Resource(s)

• azuread_authentication_strength_policy

Potential Terraform Configuration

resource "azuread_authentication_strength_policy" "yubikey_strength" {
  display_name = "Yubikey"
  allowed_combinations = [
    "fido2"
  ]
  combination_configurations = {
    appliesToCombinations = "fido2"
    allowedAAGUIDs = ["de1e552d-db1d-4423-a619-566b625cdc84", "90a3ccdf-635c-4729-a248-9b709135078f"]
  }
}

References

• Terraform docs: azuread_authentication_strength_policy
• Microsoft Graph REST API docs: authenticationCombinationConfiguration