Forum Discussion

KhaledGazzar's avatar
KhaledGazzar
Copper Contributor
Sep 30, 2019
Solved

Azure AD identnty protection User and sign-in policy

Greetings,

 

As per Microsoft article https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-close-active-risk-events , there is an option mentioned to change password on the controls for user risk policy. But this control isn't appear to me. What is can see only allow access with MFA or Block access.

 

My second question: What is the difference between user risk policy and sign-in risk policy? i see both policies have the same options.

 

Regards,

 

Khaled El Gazzar

admin
office 365
security
  • VasilMichev's avatar
    VasilMichev
    Sep 30, 2019

    It's explained in the document you linked to. Think of the sign-in policy as real-time detection based on the parameters of the current login attempt, and the risk policy as adding on top of that, with other signals. The change password control is only available for the risk policy.

2 Replies

  • VasilMichev's avatar
    VasilMichev
    MVP
    Sep 30, 2019

    It's explained in the document you linked to. Think of the sign-in policy as real-time detection based on the parameters of the current login attempt, and the risk policy as adding on top of that, with other signals. The change password control is only available for the risk policy.

Resources