Identify all users using Basic Authentication

%3CLINGO-SUB%20id%3D%22lingo-sub-321571%22%20slang%3D%22en-US%22%3EIdentify%20all%20users%20using%20Basic%20Authentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-321571%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20it%20possible%20to%20run%20a%20PS%20script%20of%20some%20sort%20which%20would%20identify%20all%20users%20who%20are%20connecting%20to%20O365%20services%20(Exchange)%20using%20basic%20auth.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20we%20run%20the%20report%20via%20the%20GUI%20in%20Azure%20AD%20Sign-In's%20blade%20and%20filter%20by%20'Client%20App'%20-%20this%20gives%20u%20the%20info%20we%20need%20but%20the%20export%20is%20limited%20to%205000%20events.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20a%20way%20to%20extract%20this%20info%20to%20a%20CSV%20via%20powershell%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-321571%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Occasional Contributor

Is it possible to run a PS script of some sort which would identify all users who are connecting to O365 services (Exchange) using basic auth.

 

When we run the report via the GUI in Azure AD Sign-In's blade and filter by 'Client App' - this gives u the info we need but the export is limited to 5000 events.

 

Is there a way to extract this info to a CSV via powershell?

0 Replies