User at Risk: email notification missing

Nodira Abdurakhmonova 21 Reputation points
2022-10-20T09:36:15.03+00:00

Hello,
We have Risky user and Risky sign-in policies in place. We noticed that there are many users with Risk status labeled as "Remediated" for whom there was no email notification generated. The risk level for them is supposed to be high, as the remediation step was to require the password change or reset for the account.
We thought that it could be caused by some kind of delay between the risk detection and email generation and if in meanwhile the user changes his password, the email notification is not sent. Is it true? What else can be the reason of this behaviour?
Thanks!

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,800 questions
0 comments No comments
{count} votes

Accepted answer
  1. Cedric NONOGNI 161 Reputation points
    2022-10-20T13:39:48.097+00:00

    Have you done the required specific settings for email notification on risk detections?

    If you did it and it works,if yes it is possible to something noticed kind of delay of not receiving some individuals alert if there are too many risk event occurring in a short period of time, when it is the case to only on notification is generated, that aggregate all of them.

    You should also check on the risk level you specified for the notification because you won’t have notification for risk level lower than the specified level.
    The links below may be helpful as well.

    https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-notifications


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.