Microsoft Entra ID Protection

Product

Microsoft Entra ID Protection detects, investigates and remediates identity-based risks by scoring sign-in risk and user risk, which Conditional Access policies can use to require MFA, a password change or block access.

Title graphic: Microsoft Entra ID Protection (Product)

Type	Product
Documentation	learn.microsoft.com/en-us/entra/id-protection/overview-identity-protection

Key points about Microsoft Entra ID Protection

Entra ID Protection watches sign-ins and flags accounts that look stolen. · Microsoft Entra ID Protection - Simply Explained
Baseline risk-aware CA uses Entra ID Protection user risk and sign-in risk, for example requiring MFA at medium sign-in risk. · Conditional Access with Defender for Identity…

Episodes about Microsoft Entra ID Protection

Copilot in Microsoft Entra ID - Simply Explained

2026-07-13 · Video on YouTube

Microsoft Copilot in Microsoft Entra ID brings AI directly into identity and access management, helping administrators work faster while improving security. Instead of manually navigating through users, groups, roles, permissions, Conditional Access policies…

Microsoft Entra ID Protection - Simply Explained

2026-10-25 · Video on YouTube

Learn how Microsoft Entra ID Protection detects password attacks, evaluates sign-in and user risk, and automates security to protect your cloud environment. Microsoft says more than 97 percent of identity attacks are just password attacks. The usual way into…

Conditional Access with Defender for Identity Signals

2025-08-05 · Video on YouTube

Your best Microsoft 365 security signal isn’t the login—it’s what the identity does next. Wire Conditional Access (the gatekeeper) to listen to Defender for Identity (the watcher), and you’ll auto-raise friction when behavior turns risky—shrinking dwell time…

Timeline of episodes about Microsoft Entra ID Protection

Articles about Microsoft Entra ID Protection (2)

Sign-In Risk vs. User Risk in Microsoft Entra ID: What is the Difference?
2026-10-26 · Mirko Peters
Learn the critical differences between sign-in risk and user risk in Microsoft Entra ID Protection and how to configure conditional access properly.
Mastering Impossible Travel Detection in Microsoft Entra ID
2026-08-28 · Mirko Peters
Welcome back to the companion blog for our ongoing podcast series. As cloud environments expand and remote work becomes the undisputed baseline for organizations wo…

Frequently asked questions

What is Microsoft Entra ID Protection?

It is the part of Microsoft's cloud that watches sign-ins and flags accounts that look stolen. The episode explains that it looks at two kinds of risk, the user and the sign-in, and assigns risk levels that can then be turned into a decision. · From the episode: Microsoft Entra ID Protection - Simply Explained

What baseline Conditional Access policies does the episode suggest?

Turn on Entra ID Protection risk evaluation, block when user risk is High or require a password change, require MFA at Medium or higher sign-in risk, and require compliant devices for sensitive apps. · From the episode: Conditional Access with Defender for Identity…

Glossary

Community wiki

Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.

Experts and companies for this topic

Nobody has listed this topic yet. Add it to your profile.

Sources

Documentation: learn.microsoft.com/en-us/entra/id-protection/overview-identity-protection
Feed for this topic (RSS): entity/microsoft-entra-id-protection/feed.xml
M365.FM episodes on this topic: 3
Articles on this topic: 2

Maintained by Mirko Peters (Microsoft MVP) · Last updated: 2026-11-03