sign-in risk

Close the gap. Azure AD Identity Protection & Conditional Access.

July 14, 2020February 15, 2021
6 Comments
Entra, Security
8 min read

This blog is about Azure AD Identity Protection and Conditional Access, and how these two features are working together. This is not my first article on this subject. (neither my last) In previous blogs, I covered the sign-in risk and user risk policies as part of the Secure Score Series, and in my blog, about Azure Multifactor Authentication I talked about Azure AD Identity Protection, and how it can be used to roll out MFA in your organization. Microsoft released…

Microsoft Secure Score Series – 11 – Turn on user risk policy

June 8, 2020June 23, 2020
6 Comments
Entra, Secure Score, Security
5 min read

With the user risk policy turned on, Azure AD detects the probability that a user account has been compromised. As an administrator, you can configure a user risk conditional access policy to automatically respond to a specific user risk level. For example, you can block access to your resources or require a password change to get a user account back into a clean state. Today, we take a look at Azure AD Identity Protection. More specifically, the ability to take…

Microsoft Secure Score Series – 07 – Turn on sign-in risk policy

April 13, 2020June 6, 2020
2 Comments
Entra, Secure Score, Security
4 min read

Turning on the sign-in risk policy ensures that suspicious sign-ins are challenged for multi-factor authentication. Azure AD Identity Protection is powerful in many ways. As discussed in my previous post about Multi-factor Authentication, you can use IdP to onboard your user for MFA. Once you’ve had all your users registered, it’s time to tighten your security by prompting for MFA when a sign-in is risky. This improvement action wants you to turn on the sign-in risk policy in Azure Identity…