What does AzureActiveDirectoryStsLogon mean

Question

Hi team,

What does AzureActiveDirectoryStsLogon mean in logs?

Answer 1

Hello Gabriela, The AzureActiveDirectoryStsLogon event in sign-in logs refers to a user’s successful authentication using Security Token Service (STS) protocols in Azure Active Directory (Azure AD). If you have further questions, feel free to ask!

Marwan

Answer 2

Hello,

Thank you for posting in Q&A forum.

The AzureActiveDirectoryStsLogon event in logs typically pertains to authentication activities associated with Azure Active Directory (Azure AD). More specifically, it indicates that a Security Token Service (STS) logon has occurred.

STS is responsible for issuing security tokens that are used for user authentication and access control in services integrated with Azure AD. When you see AzureActiveDirectoryStsLogon in your logs, it usually means that a user or application has authenticated through Azure AD to access resources or services.

I hope the information above is helpful.

Best Regards,

Yanhong Liu

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.