Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,635 questions
Why has my long running 90 day inactive Guest Access Review suddenly start using non-interactive sign-in instead of interactive sign in timestamps?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 79%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERN%3C/text%3E%3C/svg%3E)
Randy Nameth
0
Reputation points
Hello,
I have been running the above mentioned access review for probably 2 years without major issues. Recently it seems that the reviews have switched to looking at non-interactive sign-ins as well as interactive sign ins.
There is really two issues here but for this post I am more concerned about number one.
- Guests that have not interactively connected to our tenant in 7 months do not show up on the 90 day inactive report. (They show recent non interactive sign ins but as far as we are concerned they are not related to our tenant)
- Guests are showing non interactive sign ins without connecting to our tenant for several months. If truly connecting to our tenant the guests would be prompted for MFA every day...causing an interactive sign in.
The monthly review only shows 3 guests inactive for 90 days or more when it should show probably 20.
The user below is not showing up as on the 90 day inactive user list.
Perhaps I am missing something as I imagine this cannot be by design.
Any guidance would be appreciated. :-)
Thanks in advance
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 26%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
Navya 6,845 Reputation points Microsoft Vendor2024-05-28T15:25:04.54+00:00 Thank you for posting this in Microsoft Q&A.
Interactive sign-ins are performed by a user. They provide an authentication factor to Microsoft Entra ID. Non-interactive sign-ins are done on behalf of a user. These delegated sign-ins were performed by a client app or OS components on behalf of a user and don't require the user to provide an authentication factor. In some considerations non-interactive sign-ins on the interactive sign-in logs. Guests are displaying non- interactive sign-ins instead of interactive sign-ins after a long period of time in your scenario.
To gain a better understanding of the problem. Could you please review and share the logs of guest users? Which application was used for log-in and to which tenant did it belong? The application belongs to either the guest user or your tenant.
Thanks,
Navya.
-
Navya 6,845 Reputation points Microsoft Vendor
2024-06-03T11:56:14.2033333+00:00 We haven’t heard from you on the last response. Would you tell me whether your issue has been resolved? I am looking forward to your reply.
-
Deleted
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
-
Randy Nameth 0 Reputation points
2024-06-07T20:35:43.5866667+00:00 I tried to reply with sign in logs for two of the many users but it failed. In the end all the non interactive sign ins were from the guests home tenants.
They did not have any interactive sign ins at all of that time frame yet still did not show up on our inactive guest users report.
I will try the detailed response again a little later.
-
Randy Nameth 0 Reputation points
2024-06-07T20:43:32.67+00:00 User 1
User 2
Again the non interactive sign ins appear to be coming from guests home tenant.
Sign in to comment