Audit Logs Get SignIn

description retrieve details for a specific sign in event in microsoft entra using the provided tenant's unique id endpoint url /v1 0/auditlogs/signins/{{id}} method get inputs path parameters (object) – required id (string) – required parameters (object) odata query parameters to help customize the response output example \[ { "status code" 200, "response headers" {}, "reason" "ok", "json body" { "@odata context" "https //graph microsoft com/v1 0/$metadata#auditlogs/signins", "value" \[ { "id" "66ea54eb 6301 4ee5 be62 ff5a759b0100", "createddatetime" "2023 12 01t16 03 24z", "userdisplayname" "test contoso", "userprincipalname" "testaccount1\@contoso com", "userid" "26be570a ae82 4189 b4e2 a37c6808512d", "appid" "de8bc8b5 d9f9 48b1 a8ad b748da725064", "appdisplayname" "graph explorer", "ipaddress" "131 107 159 37", "clientappused" "browser", "correlationid" "d79f5bee 5860 4832 928f 3133e22ae912", "conditionalaccessstatus" "notapplied", "isinteractive" true, "riskdetail" "none", "risklevelaggregated" "none", "risklevelduringsignin" "none", "riskstate" "none", "riskeventtypes" \[], "resourcedisplayname" "microsoft graph", "resourceid" "00000003 0000 0000 c000 000000000000", "status" { "errorcode" 0, "failurereason" null, "additionaldetails" null }, "devicedetail" { "deviceid" "", "displayname" null, "operatingsystem" "windows 10", "browser" "edge 80 0 361", "iscompliant" null, "ismanaged" null, "trusttype" null }, "location" { "city" "redmond", "state" "washington", "countryorregion" "us", "geocoordinates" { "altitude" null, "latitude" 47 68050003051758, "longitude" 122 12094116210938 } }, "appliedconditionalaccesspolicies" \[ { "id" "de7e60eb ed89 4d73 8205 2227def6b7c9", "displayname" "sharepoint limited access for guest workers", "enforcedgrantcontrols" \[], "enforcedsessioncontrols" \[], "result" "notenabled" }, { "id" "6701123a b4c6 48af 8565 565c8bf7cabc", "displayname" "medium signin risk block", "enforcedgrantcontrols" \[], "enforcedsessioncontrols" \[], "result" "notenabled" } ] } ] } } ] output parameters status code (number) reason (string) json body (object) @odata context (string) value (array) id (string) createddatetime (string) userdisplayname (string) userprincipalname (string) userid (string) appid (string) appdisplayname (string) ipaddress (string) clientappused (string) correlationid (string) conditionalaccessstatus (string) isinteractive (boolean) riskdetail (string) risklevelaggregated (string) risklevelduringsignin (string) riskstate (string) riskeventtypes (array) file name (string) – required file (string) – required resourcedisplayname (string) resourceid (string) status (object) errorcode (number) failurereason (object) additionaldetails (object) devicedetail (object) deviceid (string) displayname (object) operatingsystem (string) browser (string) iscompliant (object) ismanaged (object) trusttype (object) location (object) city (string) state (string) countryorregion (string) geocoordinates (object) altitude (object) latitude (number) longitude (number) appliedconditionalaccesspolicies (array) id (string) displayname (string) enforcedgrantcontrols (array) file name (string) – required file (string) – required enforcedsessioncontrols (array) file name (string) – required file (string) – required result (string)