Bad Password Attempts report user ID question

[Gunter Danzeisen]

I enabled AAD Connect health on the AD FS service. Now when I look up the Bad Password Attempts report I see the SAM account names in the USER ID column. 

Is there a way to configure this so that the USER ID column shows the UPN of the users instead of the SAM Account name?

Thanks

[#2 · Accepted solution]

Hi @Gunter Danzeisen 

you can use feature call Azure Active Directory Monitor Sign-ins

Sign-ins Under Monitor Tab in Azure Active Directory.

For More Information Please Check below URL.

https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins