Failed User Sign-In Log Report

This guide will show an administrator how to view details on why a specified user is experiencing sign-in failures.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Compliance

Handbook Reference

Package: TBD

Domain: TBD

Modifies: TBD

User Account Failed Login Reporting

1. Navigate to the Sign-In logs – Azure Active Directory portal, locate and select Add Filters. Specify Status as the search criteria and select Apply to finalize the filter selection.
   
2. Once the selections above have been specified a new Status bubble should generate, we will want to select the bubble and specify Failure as the search criteria. Select Apply to return failed sign-in attempts captured by the portal.
   
3. If you know of a specified user that is experiencing login issues and want to only view their specific failed login attempts. Select Add Filters, specifying Username as the search criteria and select Apply to finalize the filter selection.
   
4. A new Username bubble should generate, we will want to select the bubble and provide the known Username associated with the User as the search criteria. Select Apply to return failed sign-in attempts for the specified User.
   
5. All failed login attempts will be generated; clicking on a returned entry will generate a report which will provide details on why access was denied. Exploring the Failure Reason can aid in exploring possible policies that could be impacting user access.
   

Need Assistance?