Microsoft Entra Id Protection Weekly Digest

Yes, I understand what the report provides. The reports I receive show X number of Risky Sign-in in Real Time. When I click the link to review, it takes me to the Identity Protection | Dashboard and I can review Risky Sign In, Risk Detections, Risky Users, etc. None of these reports show me any Risk Activity. The email alert says I have a risk event, but Identity protection does not. The email alert in the past did work and show me the risky sign-in, but for the last six month, the report was not verifiable by the Identity Protection views.

Hi,

Are you sure there was a risky signin? Basically the notifications sent out is just a report in a email that provides :

The weekly digest email contains a summary of new risk detections. It includes:

• New risky users detected
• New risky sign-ins detected (in real time)
• Links to the related reports in ID Protection

If there were no risky sign-in it will be Zero.

Hope this helps.

JS

==

Please accept as answer and do a Thumbs-up to upvote this response if you are satisfied with the community help. Your upvote will be beneficial for the community users facing similar issues.