Post

Nathan McNulty
@nathanmcnulty.com

Did you know Entra ID Protection never automatically clears Medium or High risk? We either need to use Risk Based Conditional Access policies to remediate or an admin needs to manually remediate User risk = password reset Sign-in risk = require MFA learn.microsoft.com/...

1 repost16 likes

Nathan McNulty
@nathanmcnulty.com

It's a fairly common mistake I see to use non-remedial grant controls in risk based policies... For example, user risk of medium = Require MFA with Sign-in Frequency of Every time or X hours This doesn't clear the risk, it will never be cleared, omg, that poor user 😭

Mirko Schnellbach
@schnellbach.de

The actual option “Require MFA”, or would “Require authentication strength” do the job as well? We have switched for a while and I’ve been wondering since. (Un-)Fortunately only low risk detections since, so…

Nathan McNulty
@nathanmcnulty.com

Require auth strength works too! And even with low, we can do cool things like only prompt for auth strength on low risk when outside countries we operate in and stuff like that :)