Azure AD B2C sign in logs - Missing Data

Jayde Nienaber 6 Reputation points
2022-10-04T09:23:02.3+00:00

We've been using the Azure AD B2C sign in logs to report on user login frequency. Over the few months we have been reporting we've noticed a disparity between the user registrations and user sign in logs.

The sign in logs only show about 230 unique sign ins. However over the period we've had over 2000 registrations.

We export the sign in log on a weekly basis as it only persists for 7 days on the portal.

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,678 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Olga Os - MSFT 5,836 Reputation points Microsoft Employee
    2022-10-04T17:14:38.607+00:00

    Hello @Jayde Nienaber ,

    Welcome to the MS Q&A Forum,

    Kindly review below public article and let me know if it explains the scenario what you reports.

    Accessing Azure AD B2C audit logs

    Azure Active Directory B2C (Azure AD B2C) emits audit logs containing activity information about B2C resources, tokens issued, and administrator access. This article provides a brief overview of the information available in audit logs and instructions on how to access this data for your Azure AD B2C tenant.

    Audit log events are only retained for seven days. Plan to download and store your logs using one of the methods shown below if you require a longer retention period.

    247473-image.png

    More detailed information outlined there =>>

    Hope above answers your questions and concerns.

    --------------------------------------------------------

    Let us know if you need additional assistance. If the answer was helpful, please accept it and complete the quality survey so that others can find a solution.

    Sincerely,
    Olga Os

    0 comments No comments