Forum Discussion
Identifying stale guest users - 'lastSignInDateTime' not reliable?
So, I listed all of our tenant guest users 'lastSignInDateTime' attribute from MS Graph.
Most have up to date values here, but some got no info here (I guess its because they were never logged on), and some got the value '01.01.0001 00:00:00' ...which I guess also means they were never logged on?
But I have one confirmed active user with the '01.01.0001 00:00:00' value. Which makes me doubt if i can use these dates to delete inactive guest users? (This user is participating in team discussions, but his AAD sign-in log is also empty).
If Teams is all they're signing into and are doing so via the app, they're probably not triggering in "interactive login".
- signInActivity resource type - Microsoft Graph beta | Microsoft Docs
- Why is the lastSignInDateTime property only updated with interactive sign-ins? - Microsoft Tech Community
PS: Your assumption is correct about the early date, as that is the minimum value of a [DateTime] structure. The minimum value does typically indicate inactivity in attributes that cannot be null.
Cheers,
Lain
- LainRobertsonSilver Contributor
If Teams is all they're signing into and are doing so via the app, they're probably not triggering in "interactive login".
- signInActivity resource type - Microsoft Graph beta | Microsoft Docs
- Why is the lastSignInDateTime property only updated with interactive sign-ins? - Microsoft Tech Community
PS: Your assumption is correct about the early date, as that is the minimum value of a [DateTime] structure. The minimum value does typically indicate inactivity in attributes that cannot be null.
Cheers,
Lain
- GonwildCopper Contributoraha, I did not know this. Yes, in this case the user was signing into the app. Guess one have to take non-interactive logins in account when ruling out stale users. thanks!