How to retrieve the ip before NAT

Question

Hello,

I am trying to work with Sign in Events on my Entra directory, and I was wondering if there is a way to see the IP of the sign user/machine before NAT.

This question was asked before on : https://learn.microsoft.com/en-us/answers/questions/213582/azure-ad-user-sign-ip-address-before-nat

And I don't know if it was implemented/how to do it.

Another question, Is there a way to see which authentication method the user used in order to sign in to the application (for example: MFA, signal way, etc.)

Thanks.

Answer 1

No, there is no way, the logs will only ever show the IP which Microsoft front-end servers "see". For the auth method used, just check the Authentication Details tab on the corresponding sign-in event. For example, this is a "passwordless" login leveraging the Authenticator app.