Home > Baseline Management > Manage Baselines > Supported Baseline Configurations > Microsoft Entra ID
Export to PDFMicrosoft Entra ID
The following table lists the baseline configurations of Microsoft Entra ID supported by Elements.
| Configuration | Property | Last Update |
|---|---|---|
| AuthenticationMethodConfigurations > Email | AllowExternalIdToUseEmailOtp | August 2025 |
| AuthenticationMethodConfigurations > Email | ExcludeTargets | August 2025 |
| AuthenticationMethodConfigurations > Email | IncludeTargets | August 2025 |
| AuthenticationMethodConfigurations > Email | State | August 2025 |
| AuthenticationMethodConfigurations > SMS | ExcludeTargets | August 2025 |
| AuthenticationMethodConfigurations > SMS | IncludeTargets | August 2025 |
| AuthenticationMethodConfigurations > SMS | State | August 2025 |
| AuthenticationMethodConfigurations > Voice | ExcludeTargets | August 2025 |
| AuthenticationMethodConfigurations > Voice | IncludeTargets | August 2025 |
| AuthenticationMethodConfigurations > Voice | IsOfficePhoneAllowed | August 2025 |
| AuthenticationMethodConfigurations > Voice | State | August 2025 |
| Groups | AcceptedSenders | |
| Groups | AllowExternalSenders | |
| Groups | AppRoleAssignments | |
| Groups | AutoSubscribeNewMembers | |
| Groups | Classification | |
| Groups | Description | |
| Groups | DisplayName | |
| Groups | Endpoints | |
| Groups | ExpirationDateTime | |
| Groups | GroupTypes | |
| Groups | HideFromAddressLists | |
| Groups | HideFromOutlookClients | |
| Groups | Id | |
| Groups | IsAssignableToRole | |
| Groups | ||
| Groups | MailEnabled | |
| Groups | MailLocalPart | |
| Groups | MailNickname | |
| Groups | MemberOf | |
| Groups | Members | |
| Groups | MembershipRule | |
| Groups | MembershipRuleProcessingState | |
| Groups | Owners | |
| Groups | PreferredDataLocation | |
| Groups | PreferredLanguage | |
| Groups | RejectedSenders | |
| Groups | ResourceBehaviorOptions | |
| Groups | ResourceProvisioningOptions | |
| Groups | SecurityEnabled | |
| Groups | Settings | |
| Groups | Theme | |
| Groups | Visibility | |
| DeviceRegistrationPolicy | localAdminPassword | |
| DeviceRegistrationPolicy | azureADJoin | |
| DeviceRegistrationPolicy | azureADRegistration | |
| DeviceRegistrationPolicy | multiFactorAuthConfiguration | |
| DeviceRegistrationPolicy | userDeviceQuota | |
| AuthorizationPolicy | AllowedToSignUpEmailBasedSubscriptions | |
| AuthorizationPolicy | AllowedToUseSSPR | |
| AuthorizationPolicy | AllowEmailVerifiedUsersToJoinOrganization | |
| AuthorizationPolicy | AllowInvitesFrom | |
| AuthorizationPolicy | AllowUserConsentForRiskyApps | |
| AuthorizationPolicy | BlockMsolPowerShell | |
| AuthorizationPolicy | DefaultUserRolePermissions | |
| AuthorizationPolicy | Description | |
| AuthorizationPolicy | DisplayName | |
| AuthorizationPolicy | EnabledPreviewFeatures | |
| AuthorizationPolicy | PermissionGrantPolicyIdsAssignedTo | |
| Directorysettings | DisplayName | |
| Directorysettings | Id | |
| Directorysettings | Settings | |
| Directorysettings | TemplateId | |
| RoleDefinitions | Description | |
| RoleDefinitions | DisplayName | |
| RoleDefinitions | Id | |
| RoleDefinitions | InheritsPermissionsFrom | |
| RoleDefinitions | IsBuiltIn | |
| RoleDefinitions | IsEnabled | |
| RoleDefinitions | ResourceScopes | |
| RoleDefinitions | RolePermissions | |
| RoleDefinitions | TemplateId | |
| IdentitySecurityDefaultsEnforcementPolicy | IsEnabled | |
| Applications | AppId | |
| Applications | SignInAudience | |
| Applications | Description | |
| Applications | DisplayName | |
| Applications | GroupMembershipClaims | |
| Applications | OptionalClaims | |
| Applications | Homepage | |
| Applications | IsFallbackPublicClient | |
| Applications | LogoutURL | |
| Applications | ObjectId | |
| Applications | Permissions | |
| Applications | ReplyURLs | |
| AuthenticationMethodConfigurations > TemporaryAccessPass | DefaultLength | |
| AuthenticationMethodConfigurations > TemporaryAccessPass | DefaultLifetimeInMinutes | |
| AuthenticationMethodConfigurations > TemporaryAccessPass | IsUsableOnce | |
| AuthenticationMethodConfigurations > TemporaryAccessPass | MaximumLifetimeInMinutes | |
| AuthenticationMethodConfigurations > TemporaryAccessPass | MinimumLifetimeInMinutes | |
| AuthenticationMethodConfigurations > TemporaryAccessPass | State | |
| AuthenticationMethodConfigurations > X509Certificate | AuthenticationModeConfiguration | |
| AuthenticationMethodConfigurations > X509Certificate | CertificateUserBindings | |
| AuthenticationMethodConfigurations > X509Certificate | State | |
| AuthenticationMethodConfigurations > X509Certificate | AuthenticationModeConfiguration | |
| CrossTenantAccessPolicy | AllowedCloudEndpoints | |
| CrossTenantAccessPolicy | DisplayName | |
| CrossTenantAccessPolicyDefault | B2BCollaborationInbound | |
| CrossTenantAccessPolicyDefault | B2BCollaborationOutbound | |
| CrossTenantAccessPolicyDefault | B2BDirectConnectInbound | |
| CrossTenantAccessPolicyDefault | B2BDirectConnectOutbound | |
| CrossTenantAccessPolicyDefault | InboundTrust | |
| CrossTenantAccessPolicyPartners | AutomaticUserConsentSettings | |
| CrossTenantAccessPolicyPartners | B2BCollaborationInbound | |
| CrossTenantAccessPolicyPartners | B2BCollaborationOutbound | |
| CrossTenantAccessPolicyPartners | B2BDirectConnectInbound | |
| CrossTenantAccessPolicyPartners | B2BDirectConnectOutbound | |
| CrossTenantAccessPolicyPartners | InboundTrust | |
| CrossTenantAccessPolicyPartners | PartnerTenantId | |
| ActivityBasedTimeoutPolicies | DisplayName (Key) | |
| ActivityBasedTimeoutPolicies | Id | |
| ActivityBasedTimeoutPolicies | AzurePortalTimeOut | |
| ActivityBasedTimeoutPolicies | DefaultTimeOut | |
| AuthenticationFlowsPolicy | SelfServiceSignUpEnabled | |
| AuthenticationMethodConfigurations -> MicrosoftAuthenticator | IsSoftwareOathEnabled | |
| AuthenticationMethodConfigurations -> MicrosoftAuthenticator | ExcludeTargets | |
| AuthenticationMethodConfigurations -> MicrosoftAuthenticator | FeatureSettings | |
| AuthenticationMethodConfigurations -> MicrosoftAuthenticator | IncludeTargets | |
| AuthenticationMethodConfigurations -> MicrosoftAuthenticator | State | |
| AuthenticationStrengthPolicies | DisplayName | |
| AuthenticationStrengthPolicies | Description | |
| AuthenticationStrengthPolicies | AllowedCombinations | |
| AuthenticationMethodsPolicy | Description | April 2025 |
| AuthenticationMethodsPolicy | DisplayName | April 2025 |
| AuthenticationMethodsPolicy | Id | April 2025 |
| AuthenticationMethodsPolicy | PolicyMigrationState | April 2025 |
| AuthenticationMethodsPolicy | PolicyVersion | April 2025 |
| AuthenticationMethodsPolicy | RegistrationEnforcement | April 2025 |
| AuthenticationMethodsPolicy | ReportSuspiciousActivitySettings | April 2025 |
| AuthenticationMethodsPolicy | SystemCredentialPreferences | April 2025 |
| B2BManagementPolicy | InvitationsAllowedAndBlockedDomainsPolicy | April 2025 |
| RoleAssignments | DirectoryScopeId | April 2025 |
| RoleAssignments | Id | April 2025 |
| RoleAssignments | PrincipalId | April 2025 |
| RoleAssignments | RoleDefinitionId | April 2025 |
| RoleAssignments | RoleDefinitionName | April 2025 |
| ConditionalAccessPolicies | Conditions | April 2025 |
| ConditionalAccessPolicies | DisplayName | April 2025 |
| ConditionalAccessPolicies | GrantControls | April 2025 |
| ConditionalAccessPolicies | SessionControls | April 2025 |
| ConditionalAccessPolicies | State | April 2025 |
| ConditionalAccess > NamedLocations > Countries(IP) | CountriesAndRegions | April 2025 |
| ConditionalAccess > NamedLocations > Countries(IP) | CountryLookupMethod | April 2025 |
| ConditionalAccess > NamedLocations > Countries(IP) | DisplayName | April 2025 |
| ConditionalAccess > NamedLocations > Countries(IP) | IncludeUnknownCountriesAndRegions | April 2025 |
| ConditionalAccess > NamedLocations > IPRanges | DisplayName | April 2025 |
| ConditionalAccess > NamedLocations > IPRanges | IpRanges | April 2025 |
| ConditionalAccess > NamedLocations > IPRanges | IsTrusted | April 2025 |
| ConditionalAccess > AuthenticationContexts | IsAvailable | April 2025 |
| ConditionalAccess > AuthenticationContexts | Description | April 2025 |
| ConditionalAccess > AuthenticationContexts | DisplayName | April 2025 |
| ConditionalAccess > AuthenticationContexts | Id | April 2025 |
| CustomSecurityAttributes | Description | April 2025 |
| CustomSecurityAttributes | Id | April 2025 |
| CustomSecurityAttributes | MaxAttributesPerSet | April 2025 |
| CustomSecurityAttributes > Attributes | AllowedValues | April 2025 |
| CustomSecurityAttributes > Attributes | AttributeSet | April 2025 |
| CustomSecurityAttributes > Attributes | Description | April 2025 |
| CustomSecurityAttributes > Attributes | Id | April 2025 |
| CustomSecurityAttributes > Attributes | IsCollection | April 2025 |
| CustomSecurityAttributes > Attributes | IsSearchable | April 2025 |
| CustomSecurityAttributes > Attributes | Name | April 2025 |
| CustomSecurityAttributes > Attributes | Status | April 2025 |
| CustomSecurityAttributes > Attributes | Type | April 2025 |
| CustomSecurityAttributes > Attributes | UsePreDefinedValuesOnly | April 2025 |
On this page