When I download an "Interactive Signins" CSV from Azure, there are many more properties than when I request SignIn with Graph?

Cai Us 0 Reputation points
2024-06-21T04:52:13.12+00:00

When we download the InteractiveSignins CSV from the Azure portal B2C sign ins blade we get these fields:

"Date (UTC)","Request ID","User agent","Correlation ID","User ID","User","Username","User type","Cross tenant access type","Incoming token type","Authentication Protocol","Unique token identifier","Original transfer method","Client credential type","Token Protection - Sign In Session","Application","Application ID ","Resource","Resource ID ","Resource tenant ID","Home tenant ID","Home tenant name","IP address","Location","Status","Sign-in error code","Failure reason","Client app","Device ID","Browser","Operating System","Compliant","Managed","Join Type","Multifactor authentication result","Multifactor authentication auth method","Multifactor authentication auth detail","Authentication requirement","Sign-in identifier","IP address (seen by resource)","Through Global Secure Access","Global Secure Access IP address","Autonomous system number","Flagged for review","Token issuer type","Incoming token type","Token issuer name","Latency","Conditional Access","Managed Identity type","Associated Resource Id","Federated Token Id","Federated Token Issuer"

Some of them I can see in a SignIn object (using C# graph client) but not all (e.g. MFA ones)

Where does portal get these from?

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,422 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Vasil Michev 100.2K Reputation points MVP
    2024-06-21T08:34:42.0233333+00:00

    Some properties are only exposed via the /beta Graph API endpoint, so try that.