Share via

Location mapped to IP in MCAS (Microsoft Cloud App Security) is different from Azure AD Sign-ins

Pablo Gallegos 21 Reputation points
2020-11-11T14:58:05.417+00:00

I've seen several instances where the location mapped to IP in MCAS (Microsoft Cloud App Security) is different from Azure AD. For example, MCAS mapped IP 185.247.70.52 to Romania and Azure AD mapped location to Dallas, TX. This triggered false positive alert in MCAS. Any ideas why these are different? Thanks.39036-mcas-azuread.png

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,750 questions
Accepted answer
  1. Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,456 Reputation points
    2020-11-13T17:14:58.797+00:00

    Hello @Pablo Gallegos , Azure AD is showing the IP address location while MCAS the ISP location. Please create a support request for MCAS for more information.

    Let us know if this answer was helpful to you. If so, please remember to mark it as the answer so that others in the community with similar questions can more easily find a solution.

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.