What determines the location shown in MCAS for Office 365 logs other than users utilizing a VPN service on their devices? I'm seeing too many users having connections from different locations within ...
acebqI believe the logs are reading the public facing IP address of the VPN exit node. If one of the IP addresses is the public facing IP of your VPN connection then you can add it to the list of trusted IP in the alert to stop it flagging impossible travel.
