question

Jennifer-3804 avatar image
0 Votes"
Jennifer-3804 asked MarileeTurscak-MSFT commented

Email alerts for successful sign-in risky users

Hi team,

Could you please send me steps on how to configure email alerts for successful sign-in risky users?

Thank you for your help

azure-ad-domain-services
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MarileeTurscak-MSFT avatar image
0 Votes"
MarileeTurscak-MSFT answered MarileeTurscak-MSFT edited

While there isn't anything built in just for risky sign-ins alone, you can set up either alerts based on user risk levels or alerts that come in a weekly digest email (which include risky sign-ins). To configure alerts based on user risk levels, you can go to Azure Active Directory > Security > Identity Protection > Users at risk detected alerts. These will be triggered based on the risk level, which is set to "high" by default.

124072-image.png

Note that you do need a P2 Premium license to use this feature.

You can also set up weekly digest emails. These emails include the following:

New risky users detected
New risky sign-ins detected (in real time)
Links to the related reports in Identity Protection

You can do this under Azure Active Directory > Security > Identity Protection > Weekly digest.

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-notifications

There is also this sample powershell script you can run for identifying risky users and eliminating false positives: https://github.com/AzureAD/IdentityProtectionTools

Let me know if this helps.




image.png (172.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jennifer-3804 avatar image
1 Vote"
Jennifer-3804 answered MarileeTurscak-MSFT commented

Thank you Marilee

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Any time. Glad it helped.

0 Votes 0 ·