Blog Post

Microsoft Entra Blog
5 MIN READ

Combatting Risky Sign-ins in Azure Active Directory

timurengin's avatar
timurengin
Icon for Microsoft rankMicrosoft
Jan 30, 2023
It is almost inevitable your organization will be targeted with malicious sign in attempts to cloud apps. It is often the case an employee uses the same password for their work account as they do for...
Updated Nov 09, 2023
Version 3.0
security
timurengin's avatar
Icon for Microsoft rankMicrosoft
Joined January 09, 2023
View Profile
Microsoft Entra Blog
Stay informed on how to secure access for employees, customers, and non-human identities, from anywhere, to multicloud and on-premises resources, with comprehensive identity and network access solutions powered by AI.
Mathias Johansson's avatar
Mathias Johansson
Copper Contributor
Jan 31, 2023

Very nice feature and thx for the KQL querys. 

A question. The User Risk can be mitigated, but how about Sign-in Risk?

Have a customer that wants to have a CA policy that enforces "Block Sign-in" if Sign-in Risk is medium or above.

This goes against Ms doc, which states that you should only request a MFA authentication in this case.

So if the user trigger a Sign-in Risk, can they themself do anything to lower the risk? Can we as admin do anything?