Sign-in Risk and User Risk on CA missing

Question

Sign-in Risk and User Risk on CA missing

I'm trying to create a Conditional Access with "Sign-in risk" or "User Risk", but none of those appear even after purchasing a P2 license.

It appeared a week ago and I could choose them, even without the license. But now no matter what I do it's gone. Is this intended? Am I doing something wrong? Any help is appreciated.

This is how it appears now:

User's image

Michael Ulloa - Prime Capital Network 0 Reputation points

2025-06-20T00:17:46.92+00:00

I think it's because it's on preview and not currently supported. Is there any date set to see when it'll get off preview?
Anonymous

2025-06-23T05:11:19.59+00:00

Hello @Michael Ulloa - Prime Capital Network

Based on your description the unavailable of "Sign-in risk" and "User risk" options in Conditional Access policies, despite having a P2 license, is unusual given that these features specifically require a Microsoft Entra ID P2 license.

Verify that your P2 license is active in your tenant, there might be a delay in the license activation or synchronization within your tenant, especially if it was a recent purchase or renewal.

It's possible that a temporary glitch, Sometimes, changes in the portal or backend might temporarily affect feature visibility.

Sometimes, the UI might vary slightly, but these conditions should appear if the P2 license is properly recognized

Verify the status of license in Microsoft Entra ID https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview

Here if it shows P2 License or not?

Check Microsoft Entra ID Protection Status:

Go to Identity > Protection > Identity Protection.
Verify that the "Policy" section for "User risk policy" and "Sign-in risk policy" is accessible and that you can configure them there.

If these checks confirm that your P2 license is active and Identity Protection is enabled, and the options still don't appear let us know.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

1 answer

Your answer

Michael Ulloa - Prime Capital Network 0 Reputation points

2025-06-20T00:17:46.92+00:00

I think it's because it's on preview and not currently supported. Is there any date set to see when it'll get off preview?
Anonymous

2025-06-23T05:11:19.59+00:00

Hello @Michael Ulloa - Prime Capital Network

Based on your description the unavailable of "Sign-in risk" and "User risk" options in Conditional Access policies, despite having a P2 license, is unusual given that these features specifically require a Microsoft Entra ID P2 license.

Verify that your P2 license is active in your tenant, there might be a delay in the license activation or synchronization within your tenant, especially if it was a recent purchase or renewal.

It's possible that a temporary glitch, Sometimes, changes in the portal or backend might temporarily affect feature visibility.

Sometimes, the UI might vary slightly, but these conditions should appear if the P2 license is properly recognized

Verify the status of license in Microsoft Entra ID https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview

Here if it shows P2 License or not?

Check Microsoft Entra ID Protection Status:

Go to Identity > Protection > Identity Protection.
Verify that the "Policy" section for "User risk policy" and "Sign-in risk policy" is accessible and that you can configure them there.

If these checks confirm that your P2 license is active and Identity Protection is enabled, and the options still don't appear let us know.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

Answer 1

Raja Pothuraju 47,240 Microsoft External Staff Moderator

Hello Michael Ulloa - Prime Capital Network,

Based on your description, it appears you are unable to see the User Risk and Sign-in Risk options while creating a Conditional Access (CA) policy in your tenant.

Please note that these options are not available in Microsoft Entra External ID (CIAM) or Azure AD B2C tenants. I recommend verifying whether you are creating the CA policy within an External ID tenant.

For reference, I’ve included a screenshot from my External ID tenant, where these risk-based conditions are also not available.

User's image

However, when creating a CA policy from a workforce tenant, these options are available under the Conditions blade.

To identify the tenant type, go to Microsoft Entra ID > Manage tenants. There, you will see a list of all the tenants you are a part of, along with their corresponding types.

Raja Pothuraju 47,240 Reputation points Microsoft External Staff Moderator

2025-06-27T16:14:03.5566667+00:00

Hello Michael Ulloa - Prime Capital Network,

Just checking in to see if the below answer helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Raja Pothuraju 47,240 Reputation points Microsoft External Staff Moderator

2025-07-02T02:18:12.52+00:00

Hello Michael Ulloa - Prime Capital Network,

Just checking in to see if the below answer helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Share via

Sign-in Risk and User Risk on CA missing

1 answer

Your answer