Looking to create a report of User first sign and location in with Azure AD reports or Graph API

Question

Is it possible to create a sign-in report with first sign-in and geo-location (location-based by IP), looking at doing this with an Azure sign-in report or with Graph API ?

We have a lot of fake M365 accounts being created for our University by signing up for free classes, getting the benefits of an M365 account, and getting a .edu email. We usually find out much later from HR that they never actually attended the course but are looking for faster remediation.

Answer 1

Hi Zach Gonzales IS,

Thanks for reaching out on Microsoft Q&A!

You can do this through the HTTP action in Logic Apps by calling the ‘Activity API’ in Microsoft Graph, which holds all details you want. You could do this for a:

Single user:

https://learn.microsoft.com/en-us/graph/api/signin-get?view=graph-rest-1.0&source=recommendations&tabs=http

Or by last logged sign ins:

https://learn.microsoft.com/en-us/graph/api/signin-list?view=graph-rest-1.0&tabs=http

Please click “Accept answer” if you find this helpful. Feel free to drop additional queries in the comments below!

Kind regards,

Sonny