dafthack/MFASweep

Catch Conditional Access Policy login failures.

jeff-bb opened this issue · 0 comments

Authenticating to Microsoft Graph API... and Authenticating to Azure Service Management API... could use a catch for login being denied for a conditional access policy.

# Conditional Access Policy

ElseIf($RespErr -match "AADSTS53003")
{
Write-Output "[*] WARNING! The account $username appears to be protected by a Conditional Access Policy."
}