Azure Active Directory Sign-in logs for failed logins ?

EnterpriseArchitect 6,041 Reputation points
2022-06-30T15:16:56.677+00:00

Where can I find the Azure Active Directory Sign-in logs for failed logins or any logins that are blocked by my custom policy?
As I need to analyze what has been blocked with my Azure Conditional Access policy:

216623-image.png

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Carlos Solís Salazar 18,191 Reputation points MVP Volunteer Moderator
    2022-06-30T15:40:43.207+00:00

    Hi @EnterpriseArchitect

    Thank you for asking this question on the **Microsoft Q&A Platform. **

    Can you check in the Sign-In log for the user in your Azure AD ?

    216546-image.png

    Hope this helps,
    Carlos Solís Salazar

    ----------

    Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.
    NOTE: To answer you as quickly as possible, please mention me in your reply.


    3 people found this answer helpful.

  2. JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator
    2022-06-30T22:02:23.243+00:00

    @EnterpriseArchitect
    Thank you for your post!

    Adding onto what @Carlos Solís Salazar mentioned, you can check for failed Conditional Access policy sign-ins via the Sign-In Logs tab and filtering for Conditional Access: Failure. For more info - Analyze sign-ins with the Azure AD sign-ins log.

    216558-image.png

    Additional Link:
    Troubleshoot using the What If tool in Conditional Access - This tool enables you to evaluate a simulated sign-in of a user

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.

    ----------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.