Azure AD Identity Protection risky sign in false positives

Question

Azure AD Identity Protection risky sign in false positives

Neel Goradia 1

Anyone else having lots of false positive high risk sign ins?
Noticed the influx of risky sign ins with status as interrupted and detection type "unfamiliar sign in properties".
Have been manually dismissing the risks by providing risk feedback however its becoming a bit overwhelming investigating every single sign in which turns out to be a false positive.

Thanks

Shweta Mathur 14,911 Reputation points Microsoft Employee

2022-11-29T10:33:57.767+00:00

Hi @Neel Goradia ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,
Shweta

Shweta Mathur 14,911 Reputation points Microsoft Employee

2022-11-29T10:33:57.767+00:00

Hi @Neel Goradia ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,
Shweta

Answer 1

Andy David - MVP 120.5K MVP

Not seeing that.
HAve you investigated deeper to see what specific logons its tripping on?
Are you saying they dont meet the criteria?
If not, I would open a ticket with Azure support

https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks

Azure AD Identity Protection risky sign in false positives

1 answer

Activity