Resilience through monitoring and analytics
Monitoring maximizes the availability and performance of your applications and services. It delivers a comprehensive solution for collecting, analyzing, and acting on telemetry from your infrastructure and applications. Alerts notify you when issues are found with your service or applications. You can identify and address issues before the end users of your service notice them. Microsoft Entra ID Log Analytics helps you analyze, search the audit logs and sign-in logs, and build custom views.
Monitor and get notified through alerts
Monitoring your system and infrastructure helps ensure the overall health of your services. It starts with the definition of business metrics, such as, new user arrival, end user authentication rates, and conversion. Configure such indicators to monitor. If you're planning for an upcoming surge because of a promotion or holiday traffic, revise your estimates for the event and corresponding benchmark for the business metrics. After the event, fall back to the previous benchmark.
Similarly, to detect failures or performance disruptions, set up a good baseline and then define alerting. Respond to emerging issues promptly.
Implement monitoring and alerting
Monitoring: Use Azure Monitor to continuously monitor health against key Service Level Objectives (SLO). Get notification when a critical change happens. Identify Azure AD B2C policy or an application as a critical component of your business whose health needs to be monitored to maintain SLO. Identify key indicators that align with your SLOs. For example, track the following metrics, since a sudden drop in either leads to a loss in business.
Total requests: The total "n" number of requests sent to Azure AD B2C policy.
Success rate (%): Successful requests/Total number of requests.
Access the key indicators in application insights where Azure AD B2C policy-based logs, audit logs, and sign-in logs are stored.
Visualizations: Use Log Analytics to build dashboards to visually monitor the key indicators.
Current period: Create temporal charts to show changes in the total requests and success rate (%) in the current period, for example, current week.
Previous period: Create temporal charts to show changes in the total requests and success rate (%) over some previous period.
Alerting: Using Log Analytics, define alerts triggered when there are sudden changes in the key indicators. These changes might negatively affect the SLOs. Alerts use various forms of notification methods including email, SMS, and webhooks. Define a criterion as a threshold for the alert trigger. For example:
- Alert for abrupt drop in total requests: Trigger an alert when total requests drop abruptly. For example, when there's a 25% drop in requests compared to previous period, raise an alert.
- Alert for significant drop in success rate (%): Trigger an alert when success rate of the selected policy drops.
- Upon receiving an alert, troubleshoot the issue using Log Analytics, Application Insights, and VS Code extension for Azure AD B2C. After you resolve the issue and deploy an updated application or policy, it monitors key indicators until they return to normal range.
Service alerts: Use the Azure AD B2C service level alerts to get notified of service issues, planned maintenance, health advisories, and security advisories.
Reporting: By using Log Analytics, build reports about user insights, technical challenges, and growth opportunities.
- Azure Dashboard: Create custom dashboards using Azure Dashboard feature, which supports adding charts using Log Analytics queries. For example, identify pattern of successful and failed sign-ins, failure reasons and telemetry about devices used to make the requests.
- Abandon Azure AD B2C journeys: Use the workbook to track abandoned Azure AD B2C journeys wherein users started sign-in or sign-up but never finished it. Find details about policy ID and steps taken by the user before abandoning the journey.
- Azure AD B2C monitoring workbooks: Use the monitoring workbooks that include Azure AD B2C dashboard, multifactor authentication (MFA) operations, Conditional Access reports, and search logs by correlationId. This practice provides better insights into the health of your Azure AD B2C environment.