From c03444587bf4b401f55e06d9e34a2bea8bdb2bad Mon Sep 17 00:00:00 2001
From: "kilo-code-bot[bot]"
 <240665456+kilo-code-bot[bot]@users.noreply.github.com>
Date: Sat, 7 Mar 2026 19:31:49 -0600
Subject: [PATCH] Disable bypass for conditional access (#41211)

## Summary

- Adds `conditional_access.bypass_disabled: true` to
`it-and-security/default.yml` to disable the bypass option for
conditional access in Fleet's GitOps configuration
- This prevents end users from bypassing conditional access blocking
during login attempts

Built for [Allen
Houchins](https://fleetdm.slack.com/archives/D0AFASNBZMW/p1772933047288969)
by [Kilo for Slack](https://kilo.ai/features/slack-integration)

Co-authored-by: kiloconnect[bot] <240665456+kiloconnect[bot]@users.noreply.github.com>
---
 it-and-security/default.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/it-and-security/default.yml b/it-and-security/default.yml
index 63934ee51c..f58a484237 100644
--- a/it-and-security/default.yml
+++ b/it-and-security/default.yml
@@ -1,6 +1,8 @@
 agent_options:
   path: ./lib/all/agent-options/agent-options.yml
 org_settings:
+  conditional_access:
+    bypass_disabled: true
   features:
     enable_host_users: true
     enable_software_inventory: true