Conditional Access grant controls
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 516131a · +1 −3 lines · also on GitHub
⋯ 187 unchanged lines
188188
189189
### Require password change
190190
191
−When user risk is detected, admins can employ the user risk policy conditions to have the user perform a secure password change after successful authentication. This process doesn't use the self-service password reset (SSPR) flow. The user must complete multifactor authentication and then change their password to remediate the risk. This process closes the user risk event to prevent unnecessary alerts for admins.
192
−
193
−When a user is prompted to change a password, they're first required to complete multifactor authentication. Make sure all users register for multifactor authentication, so they're prepared in case risk is detected for their account.
191
+When user risk is detected, admins can employ the user risk policy conditions to have the user perform a secure password change after successful authentication. This process doesn't use the self-service password reset (SSPR) flow. The user must complete multifactor authentication and then change their password to remediate the risk. This process closes the user risk event to prevent unnecessary alerts for admins. For this process to work, you need to make sure all users register for multifactor authentication, so they're prepared in case risk is detected for their account.
194192
195193
> [!WARNING]
196194
> Users must have previously registered for multifactor authentication before triggering the user risk policy.
⋯ 42 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:16 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.