Active Directory Administration Cookbook

User risk policies

With the user risk policy turned on, Azure AD Identity Protection calculates the probability that a user account has been compromised. As an admin, you can configure a user risk conditional access policy to automatically respond to a specific user risk level. For example, you can block access to your resources or require a password change to get a user account back into a clean state. Only when returned to a clean state is the user allowed to sign in normally.

In Azure AD Identity Protection, you can configure the user risk remediation policy. For the users in this policy, you need to set the conditions (risk level) under which the policy triggers and whether access is blocked when the policy is triggered. Switch the state ...