SOLVED

Sign In Reports - Mobile Devices

%3CLINGO-SUB%20id%3D%22lingo-sub-1421032%22%20slang%3D%22en-US%22%3ESign%20In%20Reports%20-%20Mobile%20Devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1421032%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20was%20looking%20at%20Azure%20AD%20Sign%20in%20reports.%20It%20looks%20like%20the%20reports%20are%20only%20showing%20signs%20in%20from%20a%20Windows%20device.%26nbsp%3B%20I%20thought%20it%20showed%20attempted%20signs%20in%20mobile%20devices%20too%3F%20Is%20that%20correct%3F%20Or%20has%20something%20gone%20wrong%20with%20the%20reports%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EE.g%20I%20checked%20my%20own%20logins.%20There's%20no%20events%20from%20the%2020th%20to%2024th%20May%20because%20I%20was%20on%20leave.%20However%20I%20had%20checked%20some%20emails%20in%20between%20those%20dates%20via%20mobile.%20There's%20no%20log%20of%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1421032%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1422761%22%20slang%3D%22en-US%22%3ERe%3A%20Sign%20In%20Reports%20-%20Mobile%20Devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1422761%22%20slang%3D%22en-US%22%3E%3CP%3EChecking%20email%20and%20in%20general%20performing%20actions%20within%20applications%20doesn't%20necessarily%20mean%20you've%20gone%20through%20the%20full%20login%20experience.%20In%20most%20cases%2C%20the%20application%20will%20simply%20use%20a%20refresh%20token%2C%20which%20can%20be%20valid%20for%2090%20days%20or%20even%20more.%20Until%20it%20expires%2C%20you%20will%20see%20no%20login%20events%20for%20the%20given%20application%2Fdevice%20combo.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Regular Contributor

Hi all,

 

I was looking at Azure AD Sign in reports. It looks like the reports are only showing signs in from a Windows device.  I thought it showed attempted signs in mobile devices too? Is that correct? Or has something gone wrong with the reports?

 

E.g I checked my own logins. There's no events from the 20th to 24th May because I was on leave. However I had checked some emails in between those dates via mobile. There's no log of this.

1 Reply
Highlighted
Best Response confirmed by David Gorman (Regular Contributor)
Solution

Checking email and in general performing actions within applications doesn't necessarily mean you've gone through the full login experience. In most cases, the application will simply use a refresh token, which can be valid for 90 days or even more. Until it expires, you will see no login events for the given application/device combo.