Remove Entra Id policy MS.AAD.3.4v1 in the near future since the feature will be deprecated

[tkol2022]

💡 Summary

According to Microsoft, "On September 30th, 2025, the legacy multifactor authentication and self-service password reset policies will be deprecated", therefore the setting to check the migration status behind policy MS.AAD.3.4v1 may become deprecated and/or no longer relevant. We should test the feature after the target date and then remove the baseline policy if it is no longer applicable.

*This issue should only be work after the target date since working it ahead of time may provide bad data.

Implementation notes

• Go to the entra admin portal and see if it is still possible to configurate a value for this specific setting
• Run the cmdlet that acquires the configuration data for the respective policy against all the test tenants and examine its value
• Determine if the policy is still applicable
• If not, remove it from the baseline and from the Rego code
• Add to the deleted policies file