Azure AD Identity Protection risky sign in false positives

Neel Goradia 1 Reputation point
2022-11-11T03:14:10.58+00:00

Anyone else having lots of false positive high risk sign ins?
Noticed the influx of risky sign ins with status as interrupted and detection type "unfamiliar sign in properties".
Have been manually dismissing the risks by providing risk feedback however its becoming a bit overwhelming investigating every single sign in which turns out to be a false positive.

Thanks

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

1 answer

Sort by: Most helpful
  1. Andy David - MVP 158K Reputation points MVP Volunteer Moderator
    2022-11-11T12:15:02.597+00:00

    Not seeing that.
    HAve you investigated deeper to see what specific logons its tripping on?
    Are you saying they dont meet the criteria?
    If not, I would open a ticket with Azure support

    https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks

    259553-image.png

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.