Audit log innacuracies

Hi all, 

Is there a reason why audit logs display a "resultstatus:succeeded" for "userloggedin" events when later on the in the individual log it states "logonerror": "temporaryRedirect"?

Then in the azure ad sign-in logs the same event is considered a failed event.

If this event is really a failed event, why is it referred to as a temporary redirect not referred to as a failed login/event? 

Additionally,  

why is the action successful if the event failed?


Answer
Answer

Hi Joshua Smith,

 

As per your concerns, if the ResultStatus shows succeeded, then it indicate that this user logged in successfully, which means, ResultStatus property shows whether the log in was successful or not.

 

As for redirect values, we think that is because when a user tries to login, Office 365 will firstly redirect him to authenticate with Azure Ad, as Office 365 uses Azure Active Directory (Azure AD) to manage user identities behind the scenes, user identity and authentication are handled completely in the cloud by Azure AD. Here’s the article about relationship between Office 365 and Azure AD: Understanding Office 365 identity and Azure Active Directory.

 

About Azure Ad sign-in log, we tried to check the screenshot you provided, however, we have no permission to further analyze this kind of log, to better help you, I suggest you to contact our dedicated Teams Support and let him help check your sign-in logs: https://azure.microsoft.com/en-us/support/community/ .

 

Thanks,

Anna

-----------------------

* Beware of scammers posting fake support numbers here.

* Kindly Mark and Vote this reply if it helps please, as it will be beneficial to more Community members reading here.

1 person found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info

Last updated January 12, 2021 Views 1,818 Applies to: