Update MT.1020 documentation to include modern authentication remark for Entra Id connect

powershell/public/maester/entra/Test-MtCaExclusionForDirectorySyncAccount.ps1

@@ -1,14 +1,17 @@
 function Test-MtCaExclusionForDirectorySyncAccount {
     <#
     .Synopsis
-    Checks if all Conditional Access policies scoped to all cloud apps and all users exclude the directory synchronization accounts
+    Checks if all Conditional Access policies scoped to all cloud apps and all users exclude the directory synchronization accounts for Microsoft Entra Connect..
 
     .Description
-    The directory synchronization accounts are used to synchronize the on-premises directory with Entra ID.
+    The directory synchronization accounts are used to synchronize the on-premises directory with Microsoft Entra Connect.
     These accounts should be excluded from all Conditional Access policies scoped to all cloud apps and all users.
-    Entra ID connect does not support multifactor authentication.
     Restrict access with these accounts to trusted networks.
 
+    With latest update, Microsoft Entra Connect does support modern authentication.
+    As environments are just moving to modern authentication, we keep this test.
+    Mute this test, when the tenant has migrated every directory synchronization account to Application-Based Authentication with the ABA service principal taking over sync, so no directory sync user users remain. If this paragraph refers to that capability, include the supported minimum version: Microsoft Entra Connect 2.5.76.0 or later.
+
     .Example
     Test-MtCaExclusionForDirectorySyncAccount
 
@@ -57,7 +60,7 @@
         # account. Service principals are not subject to Conditional Access policies and do not need to be
         # excluded from them.
         $userSyncMembers = @($Members | Where-Object { $_.'@odata.type' -ne '#microsoft.graph.servicePrincipal' })
-        $spSyncMembers   = @($Members | Where-Object { $_.'@odata.type' -eq '#microsoft.graph.servicePrincipal' })
+        $spSyncMembers = @($Members | Where-Object { $_.'@odata.type' -eq '#microsoft.graph.servicePrincipal' })
 
         if ( $userSyncMembers.Count -eq 0 -and $spSyncMembers.Count -gt 0 ) {
             $spNames = ( $spSyncMembers | Where-Object { $_.displayName } | ForEach-Object { $_.displayName } ) -join ', '