Azure AD Identity Protection risky sign in false positives

Neel Goradia 1 Reputation point
2022-11-11T03:14:10.58+00:00

Anyone else having lots of false positive high risk sign ins?
Noticed the influx of risky sign ins with status as interrupted and detection type "unfamiliar sign in properties".
Have been manually dismissing the risks by providing risk feedback however its becoming a bit overwhelming investigating every single sign in which turns out to be a false positive.

Thanks

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,473 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Andy David - MVP 141.6K Reputation points MVP
    2022-11-11T12:15:02.597+00:00

    Not seeing that.
    HAve you investigated deeper to see what specific logons its tripping on?
    Are you saying they dont meet the criteria?
    If not, I would open a ticket with Azure support

    https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks

    259553-image.png

    0 comments No comments