Forum Discussion
bart_vermeersch
Sep 15, 2021Iron Contributor
Signins: Login status = success but Conditional access = failed?
When looking at the Sign-in logs, I see entries with Status = success while the Conditional Access = failure. Shouldn't the status say Failure as well when the conditional access is blocking t...
Sep 15, 2021
Also have a lot of these on my tenants.
To my understanding, and I can be wrong :), when you see a status of Success, it's because the credentials were valid. Regardless of the CP.
If I see the entry you shared I conclude that the sign-in was allowed, it is just that the CP failed to match the condition.
To my understanding, and I can be wrong :), when you see a status of Success, it's because the credentials were valid. Regardless of the CP.
If I see the entry you shared I conclude that the sign-in was allowed, it is just that the CP failed to match the condition.
- bart_vermeerschSep 15, 2021Iron Contributor
AndresGorzelany Thank you for your feedback. It is a bit ambiguous because the conditions do match in this case, but the result of the CP is to block access.
- Sep 15, 2021Oh I see what you mean... maybe the "status" should honor also what happened with the CP, but appears not to be the case
I think we can only conclude that a sign-in was successful to the user when Status = Success and Conditional Policy != Failure (Success or Not Applied)