Reports ADB2C

Question

Hi
I am trying to prepare some kind of report to help us use ADB2C as an IDP.
What we want is to prepare a report based on users having some attributes from user data ( like username, some custom attributes, mobile, email ), some attributes from sign in logs (last login , browser used etc) and some from audit logs ( this attribute was updated and when) .
All these in one report.

So is there an Azure services which can help us to this easily. I am not sure log analytics and az monitor would be helpful, since I have read that they wont be able to process user data.

Or if there is any other strategy I can apply to fetch these data , collate and make a report using some external resource please let me know

Answer 1

@Abhay Chandramouli • Thank you for reaching out.

You can use Graph API to fetch all the user details and information from the Audit logs as well.

To get user details, you can either use Graph API beta endpoint which returns an extensive output with all the user attributes such as username, some custom attributes, mobile, email, etc. or use v1 endpoint with the $select=required attributes:

• GET https://graph.microsoft.com/beta/users/object_id_of_the_user
• Use $select to retrieve specific properties of a user

For Activity logs such as Directory audit and Sign-in logs, you can use the below Graph API:

https://learn.microsoft.com/en-us/graph/api/resources/azure-ad-auditlog-overview?view=graph-rest-1.0

You can also consider combining multiple requests in one HTTP call using JSON batching.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.