AADServicePrincipalSignInLogs of servicePrincipalType "Legacy" and "SocialIdp"

Question

Hi Dears

I want to know when a service principal's servicePrincipalType is "Legacy" or "SocialIdp", where would the serviceprincipal's signin logs be stored? The same as AADServicePrincipalSignInLogs like servicePrincipalType "Application"?

Looking forward to your reply, thanks very much!

Answer 1

@sase one

Thank you for reaching out to us.

servicePrincipalType - Identifies whether the service principal represents an application, a managed identity, or a legacy application. This is set by Azure AD internally. The servicePrincipalType property can be set to three different values ( Application, Managed Identity & Legacy ).

SocialIdp - is for internal use.

Reference: https://learn.microsoft.com/en-us/graph/api/resources/serviceprincipal?view=graph-rest-1.0#:~:text=%2C%20startsWith).-,servicePrincipalType,-String

Service principal sign-ins - Sign-ins by apps and service principals that do not involve any user. In these sign-ins, the app or service provides a credential on its own behalf to authenticate or access resources.

Under Monitoring section - Sign in logs - you can find service principal sign-ins logs

Reference for Service principal sign in logs - https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-all-sign-ins#:~:text=original%20token%20issuance.-,Service%20principal%20sign%2Dins,-Unlike%20interactive%20and

Let me know if you have any further questions.