A user reports they were blocked from signing in to Microsoft 365 this morning. In the Microsoft Entra admin center, you see the sign-in was flagged as high risk because it originated from an atypical location using valid credentials. Your organization has a conditional access policy that blocks high-risk sign-ins. Which Microsoft Entra ID capability generated the high-risk flag that triggered this policy?