Azure Sign-in logs incomplete

Scott Griggs 20 Reputation points

We rely on our Sign-in logs to verify folks aren't signing in from unusual locations or at unusual times, but just noticed the logs seem to be woefully incomplete. For example, today nearly none of our sampled users are showing up in the logs, even though email has been accessed from their cell phones and Outlook desktop.

We are reviewing the Sign-in logs from under Azure AD - Compliance, and reviewing 'User sign-ins (interactive)', 'User sign-ins (non-interactive)', 'Service principal sign-ins', and 'Managed identity sign-ins'.

Am I missing something?

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
14,619 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andy David - MVP 120.5K Reputation points MVP

    They should be in the in the non interactive

    Set the date back 7 days and filter for the application "Office 365 Exchange Online" or "Outlook Mobile" etc...

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful