MT.1052 - Device code auth flow test incorrect

[biggles007]

The new MT.1052 test seems to have an issue. Microsoft are recommending that deviceCode is blocked by default, but the test is checking to ensure that device code is within at least one policy, but doesn't specifically check to see whether the policy is actually blocking.

Therefore, having a policy that grants access would fulfil the requirements of this test, but not actually secure anything.

maester/powershell/public/Test-MtCaDeviceCodeFlow.ps1

Line 29 in c535352

if ( $policy.conditions.authenticationFlows.transfermethods -eq "deviceCodeFlow")

[tdcthosc]

Should be resolved in #722 as it will now check for various implementations of such conditional access