Reminder: Microsoft‑managed CA policy will be enforced soon — Require risk remediation for high‑risk users

MC1507808 · published Oct 14, 2026 · 2 replies

To strengthen your organization's security posture, Microsoft created a new Microsoft‑managed Conditional Access (CA) policy—Require risk remediation for high‑risk users—in your tenant, along with a new security group for this policy. This policy uses Microsoft Entra ID Protection to identify users at high risk and prompts them to self‑remediate through adaptive risk remediation, allowing users to resolve their own risk without administrator intervention. The policy is currently in report‑only m...