Share via

We saw a successful sign-in (interactive) using ADIbizaUX application

Gerald Madla 20 Reputation points
2024-06-06T20:28:54.0833333+00:00

I understand that ADIbizaUX is part of Microsoft Graph and Sync. However, what does it signify if there is a successful interactive sign-in using the ADIbizaUX application?

Does this indicate that our user might have been compromised?

Why does this occurrence only affect certain users randomly?

Reference ;

https://learn.microsoft.com/en-us/answers/questions/1664691/what-exactly-is-adibizaux

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments
Accepted answer
  1. Raja Pothuraju 24,135 Reputation points Microsoft External Staff Moderator
    2024-06-10T18:00:12.0733333+00:00

    Hello @Gerald Madla,

    Thank you for posting your query on Microsoft Q&A.

    Yes, ADIbizaUX is indeed a part of Microsoft Graph and Sync, as explained in the following Q&A: link.

    Based on your statement, I understand that you're encountering successful sign-in logs related to ADIbizaUX, and you wish to determine if this is expected behavior or if it indicates a potential compromise of the user's account.

    This behavior is expected. When users log into the Azure Portal, interactions with ADIbizaUX logs are triggered due to backend resources. However, to ensure security, I recommend verifying the post-sign-in logs of the user to check for any other potentially suspicious activity beyond interactions with the ADIbizaUX application.

    Please refer to the screenshot from my test tenant, where a user signed into the Azure Portal, triggering the ADIbizaUX application in the interactive sign-in log.image

    Reference: https://learn.microsoft.com/en-us/troubleshoot/azure/entra/entra-id/governance/verify-first-party-apps-sign-in#application-ids-of-commonly-used-microsoft-applications

    I hope this information is helpful. Please feel free to reach out if you have any further questions.

    Thanks,

    Raja Pothuraju.

    If this answers your query, do click **Accept Answer** and **Yes** for was this answer helpful. And, if you have any further query do let us know.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.