Can't access external sharepoint site, risky user?

Question

I have a user who can't access an external company's SP site as it says her account is blocked due to suspicious activity. She has MFA enabled, I've checked her sign-in logs, and the risky-users section in our Azure tenant and it's empty. Nothing seems out of the ordinary. I've opened a ticket with 365 support and it's been a week of going back and forth, collecting logs and silence on their end.

If our user is an at-risk user, wouldn't her account appear under the risky user's section? Not sure what else to do to troubleshoot this.

Answer 1

Changing the user's password seemed to have works, but there was no indication there was an issue with her password. It was random, complex, MFA was on, no odd logins. Took three weeks for Microsoft to recommend that.