Azure AD Signin-risk and User-risk policy

Question

Hello,

I have one quick question about Signin-risk and User-risk policy that I have configured in AAD CA-policy.

Will AAD evaluates these 2 policies every time (just like any other policy) whenever user reaches to AAD ?
Meaning, it does not matter if user is approaching AAD as net new without any session-cookie/PRT/refresh-token

OR
Will this policies be evaluated only during first time when AAD is starting with first factor authentication.

Thanks.

Answer 1

Hi there,
some history has to built first:
https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-simulate-risk

and are calculated during sign-ins:
https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks