Calculates sign-in risk and user risk and enforces the MFA registration policy; it comes with Entra ID P2.
Also called Identity Protection, Azure AD Identity Protection, Identity Protection.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Entra ID Protection in context, with comparison tables and the common traps.
Terms in this definition
- Sign-in risk
Microsoft Entra ID Protection's assessment of how likely it is that a given sign-in was not made by the person who owns the account. With Microsoft Entra ID P2 it can be used as a condition in Conditional Access.
- User risk
Microsoft Entra ID Protection's assessment of how likely it is that an account has been compromised, for instance because its credentials have leaked. With Microsoft Entra ID P2 it can be used as a condition in Conditional Access.
- MFA registration policy
A Microsoft Entra ID Protection policy that asks targeted users to set up MFA the next time they sign in interactively, allowing 14 days before it is enforced. It requires P2 or Microsoft Entra Suite, and it does not demand MFA on every sign-in.
- Entra ID P2
Entra licence tier that adds Privileged Identity Management, access reviews and Identity Protection.
Related terms
- Account protection
Covers Windows LAPS, local user group membership, Credential Guard and Windows Hello for Business in a single Intune endpoint security policy type for Windows. Since July 2024 it has replaced the Identity protection template.
- SecurityAlert
Table in Log Analytics where Sentinel stores alerts raised by connected Microsoft security products, for example Entra ID Protection and Defender for Cloud.