5 steps to migrate Entra ID risk policies to Conditional Access before the October 1, 2026 retirement
Microsoft retires Entra ID Protection's legacy user-risk and sign-in-risk policies on October 1, 2026, after which they stop enforcing. Migrate them to Conditional Access in report-only mode first, without locking users
