What does AzureActiveDirectoryStsLogon mean

Question

Hi team,

What does AzureActiveDirectoryStsLogon mean in logs?

Answer 1

Hello Gabriela, The AzureActiveDirectoryStsLogon event in sign-in logs refers to a user’s successful authentication using Security Token Service (STS) protocols in Azure Active Directory (Azure AD). If you have further questions, feel free to ask!

Marwan

Answer 2

Hello,

Thank you for posting in Q&A forum.

The AzureActiveDirectoryStsLogon event in logs typically pertains to authentication activities associated with Azure Active Directory (Azure AD). More specifically, it indicates that a Security Token Service (STS) logon has occurred.

STS is responsible for issuing security tokens that are used for user authentication and access control in services integrated with Azure AD. When you see AzureActiveDirectoryStsLogon in your logs, it usually means that a user or application has authenticated through Azure AD to access resources or services.

I hope the information above is helpful.

Best Regards,

Yanhong Liu

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 3

Hello both,

Thank you for the information provided!
I have a last question. Where can I find the logs for the following apps:

• OfficeHome
• Office365ExchangeOnline
• Microsoft Account Controls V2

Thank you,
Gabriela

Answer 4

Hello Gabriela, that might help you to find the logs.

For OfficeHome: in Windows: Logs are often found in the %temp% directory or %appdata%\Microsoft\Office\Logs.

In Mac: Logs can be found in ~/Library/Logs/Microsoft/.

For Office365ExchangeOnline: Navigate to the Exchange Admin Center EAC, go to Compliance management > Auditing, and then choose the type of logs you need (admin audit log, mailbox audit log, etc.). You also can use powershell For Microsoft Account Controls V2: With the Azure Portal: Go to Azure Active Directory > Sign-ins or Audit logs to view logs related to user sign-ins and directory changes. Don't hesitate to ask if needed. Marwan