Entra ID Risk-Based Conditional Access

Challenge

With increasing identity-based threats, the organization needed automated protection against risky sign-ins and compromised user accounts. The goal was to deploy Conditional Access policies that enforced MFA and password remediation based on risk signals from Microsoft Entra ID Protection.

Tools & Technologies

• Microsoft Entra ID Protection
• Conditional Access Policies
• Risk Detection Signals (Sign-in Risk, User Risk)
• Microsoft Entra MFA
• Secure Password Change with Password Writeback

Implementation

1. Followed Microsoft’s risk policy configuration guidance
2. Created Conditional Access policies for sign-in risk and user risk
3. Configured sign-in risk policy to require MFA for Medium and High risk levels
4. Configured user risk policy to require secure password change and MFA for High risk users
5. Excluded emergency access accounts from policy scope to prevent lockout
6. Validated remediation flows and monitored policy effectiveness via audit logs

Architecture Diagram

Impact