Looking to create a report of User first sign and location in with Azure AD reports or Graph API

Zach Gonzales IS 20 Reputation points
2023-07-26T19:30:39.9533333+00:00

Is it possible to create a sign-in report with first sign-in and geo-location (location-based by IP), looking at doing this with an Azure sign-in report or with Graph API ?

We have a lot of fake M365 accounts being created for our University by signing up for free classes, getting the benefits of an M365 account, and getting a .edu email. We usually find out much later from HR that they never actually attended the course but are looking for faster remediation.

Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
2,707 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
18,692 questions
0 comments No comments
{count} votes

Accepted answer
  1. Sonny Gillissen 3,186 Reputation points
    2023-07-26T21:22:08.2+00:00

    Hi Zach Gonzales IS,

    Thanks for reaching out on Microsoft Q&A!

    You can do this through the HTTP action in Logic Apps by calling the ‘Activity API’ in Microsoft Graph, which holds all details you want. You could do this for a:

    Single user:

    https://learn.microsoft.com/en-us/graph/api/signin-get?view=graph-rest-1.0&source=recommendations&tabs=http

    Or by last logged sign ins:

    https://learn.microsoft.com/en-us/graph/api/signin-list?view=graph-rest-1.0&tabs=http

    Please click “Accept answer” if you find this helpful. Feel free to drop additional queries in the comments below!

    Kind regards,

    Sonny


0 additional answers

Sort by: Most helpful