Troubleshooting sign-in blocks with sign-in logs

Skills you'll practise

• Find the failing sign-in and read its status, error code and policy results.
• Tell account problems, MFA problems and policy/device conditions apart.
• Recognize password spray and impossible-travel patterns in sign-in lists.
• Choose a fix that addresses the cause instead of excluding the user.
• Document exclusions so they are narrow, approved, time-limited and reviewed.

Course outline

1. 1.Troubleshooting sign-in blocks with sign-in logsVideo · 4 min
2. 2.Reading one sign-in entryLesson · 8 min
3. 3.Patterns across many sign-insLesson · 8 min
4. 4.Fixing the cause, not the policyLesson · 8 min
5. 5.Troubleshooting sign-in blocks with sign-in logs: knowledge checkKnowledge check · 23 questions
6. 6.Troubleshooting sign-in blocks with sign-in logs: practical exerciseKnowledge check · 1 question
7. 7.Final exam9 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

• Microsoft Learn: Troubleshooting sign-in problems with Conditional Access
• Microsoft Learn: Microsoft Entra authentication and authorization error codes
• Microsoft Learn: Conditional Access: report-only mode and the What If tool
• NIST SP 800-63B Digital Identity Guidelines: Authentication and Lifecycle Management