Azure log shows user logon from Russia and Authentication detail showed user approved.

brichardi 331 Reputation points
2025-01-23T15:01:15.5766667+00:00

Hello everyone,

While checking Azure Identity Risky user, I came across an account that showed:

Logon location: Zelenograd, Moskva, RU

IP: 188.130.143.116

Device info: Operating System Ios 17.1.2

Authentication Result: User approved.

Can anyone help me understand why an IOS device located in US having RU IP address, and suceesfully logon when we have Conditional Access policy block signin outside of US.

Thanks for your help.

Microsoft Identity Manager
Microsoft Identity Manager
A family of Microsoft products that manage a user's digital identity using identity synchronization, certificate management, and user provisioning.
743 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,020 questions
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.