Azure Active Directory Identity Protection in Preview

A new Azure service, Azure Active Directory (AAD) Identity Protection, could help administrators identify security risks and system breaches due to compromised AAD user accounts. Currently in public preview, the service could help organizations understand how their AAD credentials are being used or abused. The service could also encourage the use of Azure Multi-Factor Authentication (MFA) to protect credentials and reestablish them after a breach. The service will likely require AAD Premium user subscription licenses, and it will take some work to deploy effectively.

Identifying At-Risk Credentials

AAD Identity Protection assists administrators in identifying at-risk or lost credentials. It does not itself prevent AAD credential loss, but it helps identify credentials that have been compromised or are at risk of being compromised. It could help mitigate risks of those credentials being abused in a similar manner to preventing financial loss due to abuse of a compromised credit card number.