Microsoft 365 Admins: These Entra Risk Policies Just Moved. Here’s What You Need to Know
Heads up Microsoft 365 Admins -- there's an important change in risk policies that you need to know about.
You may have recently received an email from Microsoft about migrating your User Risk Policy and Your user sign in risk policy to Conditional Access before they’re retired on October 1, 2026. That’s now!
These are policies that can block risky users as well as require MFA for users logging onto the system in what Microsoft feels is risky.
The legacy User Risk Policy and Sign-in Risk Policy are moving out of the old Identity Protection configuration and into Conditional Access.
This isn't just a recommendation anymore. Microsoft says they started retiring those legacy risk policies on October 1st, 2026.
So, what should you do?
Check out our recommendations on the LiftOff 365 YouTube channel and let us know if you have any questions!