Two Microsoft managed conditional access policies are missing.

Question

Hello There,

There's only one of the Microsoft managed conditional access policies added to the tenant. The Microsoft managed conditional access policies are:

Multifactor authentication for admins accessing Microsoft Admin Portals – was added to tenant.

Multifactor authentication for per-user multifactor authentication users – not yet seen in tenant.

Multifactor authentication and reauthentication for risky sign-ins – not yet seen in tenant.

Will those two policies be added to the tenant later, or will they not be added because the tenant doesn't meet the requirements in this case?

The tenant has a P2 license.

Answer 1

If the tenant have other conditional access policies there do the same, it will not be added to the tenant.

As I had understand it (and what I see in my own tenant) also.

Answer 2

As per https://learn.microsoft.com/en-us/entra/identity/conditional-access/managed-policies

Microsoft will enable these policies after no less than 90 days after they're introduced in your tenant if they're left in the Report-only state. Administrators might choose to enable these policies sooner if they wish.

---

hth

Marcin