How can we display the actual end user IP addresses for B2C users instead of Microsoft IP addresses?

Question

How can we display the actual end user IP addresses for B2C users instead of Microsoft IP addresses?

Daniel-4204 105

We use Azure B2C for our App. How can we display the actual end user IP addresses for B2C users instead of Microsoft IP addresses? While it does show the actual IP for admin users who sign in to the Azure portal to look at logs and reset customer passwords, etc... The IP addresses for all of the customer's who use our application show as Microsoft IP's instead of their own.

James Hamil 27,221 Reputation points Microsoft Employee Moderator

2024-07-31T21:02:02.8833333+00:00

Hi @Daniel-4204 , I'm looking into this and will get back to you shortly.

Best,

James

1 answer

Your answer

James Hamil 27,221 Reputation points Microsoft Employee Moderator

2024-07-31T21:02:02.8833333+00:00

Hi @Daniel-4204 , I'm looking into this and will get back to you shortly.

Best,

James

Answer 1

James Hamil 27,221 Microsoft Employee Moderator

Hi @Daniel-4204 , unfortunately I don't believe this is possible. From this thread: "To display the IP address is a bit to rely on the networking environment where your VMs. From the Sign-in activity reports in the Azure Active Directory portal, currently Azure tries best effort to convert the IP address to a physical location where the computer located as mapping IP addresses is complicated by the fact that mobile providers and VPNs issue IP addresses from central pools that are often very far from where the client device is actually used."

I would try checking the audit logs in the B2C blade. If the activity is based on custom policy user log in, the IP address should be there.

Please let me know if you have any questions and I can help you further.

If this answer helps you please mark "Accept Answer" so other users can reference it.

Thank you,

James

Daniel-4204 105 Reputation points

2024-08-01T21:21:03.94+00:00

Thank you James, we are using B2C as form of "User Authorization" to a Banking App. The customers do not know it has anything to do with Microsoft. They are simply logging in to a banking app. Logging these sign in sessions would be of value to us both from a market research effort and fraud prevention if the IP address was their real address. (Usually a mobile network or ISP, etc). The Microsoft IP addresses of your servers (not ours) doesn't really help. I have enabled P1 and P2 Subscriptions as testing for our B2C tenants as a test to see if I can enable source IP Restoration as described in this article. https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-source-ip-restoration

But it seems after my testing, the option to change this is still unavailable at entra.microsoft.com of the B2C tenant. I am assuming IP Source Restoration is a feature of Entra AD P1 and P2 and NOT Entra AD B2C P1/P2. (which is unfortunate because I can see all of our customers app sign in sessions from their as well, not just from the B2C Azure Portal)

Perhaps this article I shared is a solution to the article you shared with me. I just wish it could be a solution for me too! :)

Share via

How can we display the actual end user IP addresses for B2C users instead of Microsoft IP addresses?

1 answer

Your answer