Azure log shows user logon from Russia and Authentication detail showed user approved.
brichardi
361
Reputation points
Hello everyone,
While checking Azure Identity Risky user, I came across an account that showed:
Logon location: Zelenograd, Moskva, RU
IP: 188.130.143.116
Device info: Operating System Ios 17.1.2
Authentication Result: User approved.
Can anyone help me understand why an IOS device located in US having RU IP address, and suceesfully logon when we have Conditional Access policy block signin outside of US.
Thanks for your help.
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Entra | Microsoft Entra ID
A cloud-based identity and access management service for securing user authentication and resource access
Microsoft Security | Microsoft Identity Manager
Microsoft Security | Microsoft Identity Manager
A tool for managing user identities, credentials, and access across on-premises and cloud environments
Microsoft Security | Microsoft Entra | Other
Microsoft Security | Microsoft Entra | Other
Additional Microsoft Entra services and features related to identity, access, and network security
Sign in to answer