Prerequisites

• This issue has an informative and human-readable title.

💡 Summary

Based on discussions about the deprecation of the legacy Entra MFA checkbox settings in #1578, we decided that Entra policy 3.5 (check for weak auth methods like SMS) is really its own check and should always be evaluated no matter the state of the Manage Migration feature associated with 3.4.

The scope of this issue is to decouple the Rego policy check 3.5 from 3.4 so that 3.5 always triggers.

Motivation and context

We should always be improving the policies and in this case via analysis and discussion we decided that there is value to the user from ScubaGear always evaluating policy 3.5.

Implementation notes

1. Make the changes to the Rego and test

Acceptance criteria

• The items above have been completed.