I've received an email with 2 New risky sign-ins detected (in real-time), but when I check Azure Home->Identity Protection->report I can't find anyone.

Alfonso Sánchez 6 Reputation points
2022-02-16T07:57:45.277+00:00

I've received an email with 2 New risky sign-ins detected (in real-time), but when I check Home->Identity Protection->report I can't find anyone.

I've seen these reports, Risky users, Risky workload identities (preview), Risky sign-ins, Risk detection, but I can't find any user on them.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,137 questions
{count} vote

2 answers

Sort by: Most helpful
  1. Andy David - MVP 152K Reputation points MVP
    2022-02-16T12:48:34.793+00:00

    Sort by the risk, so the high is at top:

    Look at this link for risky sign ins: ( Filter on Risk High)
    https://portal.azure.com/#blade/Microsoft_AAD_IAM/SecurityMenuBlade/RiskySignIns

    and this for Risky Users:

    https://portal.azure.com/#blade/Microsoft_AAD_IAM/SecurityMenuBlade/RiskyUsers


  2. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.