Hi,
The Microsoft Authenticator prompt might have been triggered by a process or service that attempted to authenticate using the user's credentials. The 'ROJMP' doesn't seem to be a known Microsoft term or error code, so it's possible that it was specific to the application or service that initiated the authentication attempt.
The reason why the attempt didn't show up in the sign-in logs might be because the user declined the prompt so no actual sign-in was performed.
To investigate this further, you could:
- Ask the user for more details about what they were doing at the time they received the prompt.
- Check if there are any applications or services the user has access to that might use this type of authentication.
- Review the user's device for any unusual applications or processes.
- Check if other users have experienced similar prompts.
If you still can't identify the source, consider reaching out to Microsoft Support for assistance.