How long Azure ad kept the user sign-in log in portal

Khushboo Kumari 107 Reputation points
2023-01-20T06:33:51.0166667+00:00

Hi,

I want to know how many days the user sign log data kept in azure portal? Actually I want to see the authenticator app sign in log, so how many days like 1 year, 2 years or like this I can view?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

2 answers

Sort by: Most helpful
  1. Andreas Baumgarten 123.7K Reputation points MVP Volunteer Moderator
    2023-01-20T07:18:31.95+00:00

    Hi @Khushboo Kumari ,

    please take a look here for the default retention time for the sign-in log:

    https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/reference-reports-data-retention#how-long-does-azure-ad-store-the-data

    But you can archive the Azure AD logs in an Azure Storage Account with a retention time that fits your requirement:

    https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/quickstart-azure-monitor-route-logs-to-storage-account


    (If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

    Regards

    Andreas Baumgarten

    0 comments No comments

  2. Dimple Rane 921 Reputation points MVP
    2023-01-20T07:21:30.8166667+00:00

    The retention period for user sign-in logs in the Azure portal depends on the Azure Active Directory (AAD) pricing tier that you have.

    In the Free and Basic tiers, sign-in logs are retained for 30 days.

    In the Premium P1 and P2 tiers, sign-in logs are retained for 90 days.

    In the Azure AD P2 and Azure AD P3 tiers, sign-in logs are retained for 180 days.

    If you have an Enterprise Agreement (EA) or an Azure AD Premium P3 with an EA add-on, you can use the Azure Log Analytics service to retain sign-in logs for up to 730 days.

    You can view the user sign-in logs by navigating to the Azure portal and going to Azure Active Directory > Authentication methods > Authentication logs. You can filter the logs by date range, user, and other criteria to find the specific sign-in events that you are looking for.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.