Azure Sign-in logs incomplete

Scott Griggs 20 Reputation points
2023-05-11T17:09:25.1166667+00:00

We rely on our Sign-in logs to verify folks aren't signing in from unusual locations or at unusual times, but just noticed the logs seem to be woefully incomplete. For example, today nearly none of our sampled users are showing up in the logs, even though email has been accessed from their cell phones and Outlook desktop.

We are reviewing the Sign-in logs from under Azure AD - Compliance, and reviewing 'User sign-ins (interactive)', 'User sign-ins (non-interactive)', 'Service principal sign-ins', and 'Managed identity sign-ins'.

Am I missing something?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,158 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andy David - MVP 143.8K Reputation points MVP
    2023-05-11T18:20:05.96+00:00

    They should be in the in the non interactive

    Set the date back 7 days and filter for the application "Office 365 Exchange Online" or "Outlook Mobile" etc...

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful