Azure Active Directory last sign in date time

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi folks,

We have an Azure Active Directory source and want to retrieve the last sign in attribute lastSignInDateTime. I had this working in our sandbox environment however when I went to deploy in production, the attribute will not populate. In addition, we now see the Azure AD account aggregation running for hours (when it would normally take 10 minutes to complete).

Here’s what we did:

  1. Added string attribute lastSignInDateTime to the Azure AD account schema
  2. Ran a manual aggregation on the source
  3. Ran an unoptimized aggregation on the source

Further information:
When we look at our sandbox environment, it appears that the lastSignInDateTime attribute is no longer aggregating (since late November 2023). As far as I know, there have been no changes to the permissions on the IQService service account or changes to the Azure AD source configuration.

2

Sorry found this in the Compass Community site, should resolve my issue:

https://community.sailpoint.com/t5/IdentityNow-Forum/Azure-Active-Directory-lastSignInDateTime/m-p/236499

3

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.