Microsoft Secure Tech Accelerator
Apr 13 2023, 07:00 AM - 12:00 PM (PDT)
Microsoft Tech Community

MCAS and ServiceNow causing False Positive Impossible Travel alerts

Occasional Contributor

Hi All,

We integrated ServiceNow with Cloud App Security and we are experiencing a volume of impossible travel alerts.

How does this happen?

  1. A user(XYZ) is in ServiceNow and is logged in from India . This user(XYZ) is working on a ServiceNow ticket and updates the work notes on user(ABC) (who resides in Brazil).

  2. An impossible travel alert is generated in MCAS for User(ABC) from Brazil with an impossible travel to India.

Is there any configuration that needs to be adjustment to reduce these false-positive alerts?

0 Replies