This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 46%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER4%3C/text%3E%3C/svg%3E)
I an trying to setup a Conditional Access policy to block impossible travel as listed in the article below.
When I get to step 12, there is no option to select Impossible travel. I have all the required licenses to support Conditional Access policies. What am I missing???
https://vijilan.com/blog/strengthening-microsoft-365-security/
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 51%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
I think there is no direct option like 'impossible travel'. Risks such as risky IP address, impossible travel, and other 30+ risky factors are calculated under user risk/sign-in risk condition.
So what is the proper way to setup an impossible travel Conditional Access rule?
I think if I set the condition for sign-in risk to high and set the Access Control to block and select nothing else is should block the risky sign-in from logging in correct?