Forum Discussion
steve_elliott
Jan 21, 2019Brass Contributor
Identifying all users who authenticate using Basic Auth via PowerShell?
Is it possible to run a PS script of some sort which would identify all users who are connecting to O365 services (Exchange) using basic auth. When we run the report via the GUI in Azure AD Sign-...
VasilMichev
Jan 21, 2019MVP
Use the Azure AD blade or the Graph API. The "Script" button next to the "Download" one gives you a ready-to-use PowerShell script that queries the Graph API and fetches all the results, so you don't have to write your own.
If you want to use "standard" PowerShell, your best bet is the Unified Audit Log in the SCC, which unfortunately has been plagued with issues lately. Still, you can try getting the results via the Search-UnifiedAuditLog