From f258a1013beb3fc206559405d353e60b1aeba743 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tiago=20Ara=C3=BAjo=20=5BSSW=5D?= Date: Wed, 29 Nov 2023 10:03:37 -0800 Subject: [PATCH] =?UTF-8?q?XS=E2=9C=94=20=E2=97=BE=20Update=20and=20rename?= =?UTF-8?q?=20rule.md=20to=20rule.md=20/user-risk-policy=20(#7366)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- rules/{risky-users-policy => user-risk-policy}/rule.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) rename rules/{risky-users-policy => user-risk-policy}/rule.md (76%) diff --git a/rules/risky-users-policy/rule.md b/rules/user-risk-policy/rule.md similarity index 76% rename from rules/risky-users-policy/rule.md rename to rules/user-risk-policy/rule.md index 0c492e8ae21..41524532700 100644 --- a/rules/risky-users-policy/rule.md +++ b/rules/user-risk-policy/rule.md @@ -9,12 +9,14 @@ related: - sign-in-risk-policy created: 2022-04-29T02:13:58.669Z guid: 0aef7548-1e06-4723-9f51-a6da5f564813 + --- + Azure Active Directory (AD) Identity Protection's user risk policy helps automatically protect your users from risky behaviour on their accounts. -Azure AD has many built-in solutions to protect legitimate users from malicious actors trying to sign in to their accounts via Azure AD, one of them being user risk policy. +Azure AD has many built-in solutions to protect legitimate users from malicious actors trying to sign in to their accounts via Azure AD, one of them being user risk policy. This policy can either fully block access or require a password reset for the user to be able to login, depending on the the sign-in risk level (High, Medium and above or Low and above). @@ -22,10 +24,10 @@ The level is determined automatically by a series of factors, including: 1. Atypical travel e.g. If a user has logged in from Australia and then authenticates from Europe in the next 5 minutes, an impossible travel to physically make 2. Unfamiliar sign-in properties e.g. If a user has logged in from a location that he never logged on from before -3. And other, constantly updated factors. +3. And other, constantly updated factors When setting this up, you can also choose to apply this to all your users, selected individuals or groups, and exclude users. -![Good Example - All users with a risk of High will be blocked from signing in](userrisk.jpg) +![Good example - All users with a risk of High will be blocked from signing in](userrisk.jpg) -You can read more on how to enable these policies on [Configure and enable risk policies](https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-risk-policies) +You can read more on how to enable these policies on [configure and enable risk policies documentation](https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-risk-policies).