Configure and enable risk policies ~~ azure sign-in / user risks

 https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-risk-policies

A better solution is to allow self-remediation using Azure AD multifactor authentication (MFA) and secure self-service password reset (SSPR).

Warning

Users must register for Azure AD MFA and SSPR before they face a situation