Emphasizing security by default with advanced Microsoft Authenticator features

HotCakeX Thanks! We are fully using conditional access policies but it is not the holy grail. If you have an international organisation and people need to work from anywhere, any device, you cannot to much restrict both condition of device and/or location. 

So my thought was: if identity protection knows of a risky login, why not notify the user of a risky sign in (either via mail but preferably via the authenticator app).  

I don't think in CA policies you can currently stop logins from atypical /impossible travel events because that would be even better (stops the AiTM as in most cases they originate from entirely different countries).