Investigating and Resolving Authentication Issues
Resolving authentication issues in Azure AD can be tricky due to the number of authentication methods, sign-in methods, and other configurations that may be put in place.
The first step when attempting to troubleshoot an issue is to review any available sign-in logs in the Azure portal. To locate the sign-in logs, navigate to the Azure portal (https://portal.azure.com) and then select Azure Active Directory | Sign-in logs. See Figure 5.30:
Figure 5.30 – Sign-in logs
Each authentication failure generates an individual entry. You can select an entry to see expanded details, as shown in Figure 5.31:
Figure 5.31 – Activity details
The Basic info tab displays high-level information about this particular event. The critical piece of information will typically be listed next to Failure reason, and some expanded explanation may be available in the Additional Details...