User Sign-In Report
On the User sign-in page, you can view the sign-in logs of users for security and compliance.
Note the following:
- To retrieve data for the **User sign-in** report. A Microsoft Entra ID P1or P2 license is required.
- The first scan job after you have configured the app profile for your tenant only retrieves sign-in data of the last 7 days. Following scan jobs retrieve data after the last job.
- The user sign-in data is retained for a maximum of 6 months.
To select the columns to show on the page, click Manage columns. After selecting the columns, click Apply to apply the changes. The columns include:
- **Time** – The date and time of the sign-in.
- **Display name** – The display name of the user who signed in.
- **User principal name** – The user principal name of the user who signed in,
- **Tenant domain** – The tenant domain of the user.
- **Container** – The container that the user is in.
- **Status** – The status of the sign-in.
- **IP address** – The IP address that the user signed in from.
- **Application** – The application that the user signed in to.
- **Location** – The location of the user.
- **Resource** – The resource of the sign-in log.
- **Device browser** – The device browser of the sign-in.
- **Conditional access** – The conditional access status of the user.
- **User type** – The user type of the user.
You can also select specific users, then click the 
to expand the action list, and perform the following actions:
- **Manage MFA settings** – Enable, disable or enforce the multi-factor authentication for the selected users.
- **Reset MFA settings** – Reset users’ authentication status, methods, and delete the app passwords generated by the selected user.
- **Revoke sessions** – Revoke all sessions of the selected users and the users will need to re-sign in on all devices.
- **Reset password** – Reset passwords for the selected users by manual configuration or automatic generation.
- **Block** **sign-in** – Block the selected users from signing in. When you block someone, it immediately stops any new sign-ins for that account, and if they are signed in, they will be automatically signed out from all Microsoft services within 60 minutes.
To export the user sign-in report, click Export to expand the action list. Then, you can select from Current fields and All fields.
- If you select **Current fields**, only columns and logs shown in the table on the page will be exported. To configure the fields to show, you can manage the columns and configure the filter.
After clicking **Current fields**, the process will start to export the report.
- If you select **All fields**, the process will start to export the report.
You can then go to the process center to view the export result and download the report. For details about the Process center, see Process Center.
