Leaves it to ID Protection to decide how a risky user is fixed, either reauthentication or a secure password change, regardless of how they sign in. Selecting it also adds sign-in frequency set to Every time and an authentication strength.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Require risk remediation in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft Entra ID Protection
Uses risk scores on users and sign-ins to spot, look into and fix threats to identities. Policies that respond to that risk live in Conditional Access, and a Microsoft Entra ID P2 licence is required.
- Risky user
An account flagged as possibly compromised by ID Protection in Microsoft Entra, typically because of suspicious sign-ins or credentials found leaked. Admins can review these accounts in a dedicated report.
- HTTP / HTTPS
The protocols of the web, with HTTPS being HTTP secured by TLS.
- Sign-in frequency
Session control in Conditional Access that makes users authenticate again once a configured period has passed.
- Set
Secret permission in Key Vault for writing secrets; some older material refers to it as Create.
- Authentication strength
Grant control in Conditional Access that restricts which combinations of methods meet a policy, for example the built-in Phishing-resistant MFA. It narrows methods without enabling them; enabling is done in the authentication methods policy.