Forum Discussion

ZenCncpcn's avatar
ZenCncpcn
Copper Contributor
Nov 03, 2026

Microsoft Entra ID Authentication Request Types

Hello!

I'm currently investigating Microsoft Entra ID sign-in logs and would like to understand the following authentication request types:

  • CredentialAuthenticationController:UnifiedPlatformCredentialChallenge
  • RiskPhoneVerify:AcmaRiskPhoneVerify

I have searched the available Microsoft documentation but haven't found references that explicitly explain these identifiers. I'd like to ask for some help to clarify the following:

  • What do these request types represent?
  • What authentication processes or security mechanisms trigger them?
  • Are these expected during normal user authentication, MFA, or risk-based verification?
  • Do these events indicate an authentication challenge, an actual credential submission, or a verification attempt?
  • Is there any official Microsoft documentation or reference explaining these identifiers?

My objective is to properly interpret these events during security monitoring and avoid incorrectly classifying legitimate authentication activity as suspicious. Any technical references or clarification would be greatly appreciated.

 

Thank you!

1 Reply

  • As those are undocumented, I doubt anyone here will be able to help. Consider opening a support ticket and asking the agent.