💡 Summary

Improve the implementation instructions for AAD policy 1.1 by adding a conditional access policy template that shows the specific configuration that Scuba expects, similar to how we address all the other policies related to conditional access. See user feedback received from #941 (comment)

Find the instruction that links to Microsoft in the screenshot below and replace it with a template that looks similar to the instructions for policy 2.2. It should provide the exact configuration that Scuba expects.

Replace it with a template that looks similar to the screenshot below but describes how to disable legacy authentication instead:

Motivation and context

This makes the documentation easier for users to follow, especially when they run ScubaGear and may not know why their assessment is failing.