https://giaibainhanh.com/what-two-risk-policies-can-be-enforced-using-azure-ad-identity-protection