Last Login for Accounts

The Microsoft Entra ID connector can retrieve the last login date and time for individual users. This information can enable governance workflows to certify access and remove long-standing access if it's no longer needed.


This is the companion discussion topic for the documentation at https://documentation.sailpoint.com/connectors/identityiq8_3/microsoft/entra_id/help/integrating_entra_id/last_login_for_accounts.html

Hey everyone

Has anyone gotten this to work? ‘signInActivity’ will return a comma separated string of all of the mentioned attributes with their respective values. I am specifically just after lastSuccessfulSignInDateTime however. ‘signInActivity.lastSuccessfulSignInDateTime’ does not return results.

IIQ version: 8.3p5

Hi @BrendanT, is there any error or warning messages? I think you should raise a support ticket in this case. Thanks!

No errors running the aggregation task, thanks Dinesh, the account attribute is just not being populated. Tested on a ‘fresh’ connector config without any account/group filtering.

I assume an error would cause the task to fail, but an issue with specific attributes may generate a warning in the logs? If so I will check aggregation and connector classes in log4j.

This is all lower environment testing and I do not have the time to generate a support ticket yet, but it’s worth throwing out to the community to share and see if others have the same issue or can share relevant details on their schema setup.