1 line
54 KiB
JSON
1 line
54 KiB
JSON
{"@odata.context":"https://graph.microsoft.com/v1.0/$metadata#auditLogs/signIns","@odata.nextLink":"https://graph.microsoft.com/v1.0/auditLogs/signIns?$filter=userPrincipalName+eq+%27a.mcferren%40cascadestucson.com%27&$top=25&$skiptoken=8e0389bc6720b2ab7ac801cf535388cf88da252e2017a456eb9b6c2b054164f0","value":[{"id":"4012fd36-71c2-453e-87ad-5d7617a54700","createdDateTime":"2026-07-14T16:36:05Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"d5108493-cba8-4f08-90b6-1bb0bc09eb2a","appDisplayName":"Cascades of Tucson - ALIS SSO","ipAddress":"184.191.143.62","clientAppUsed":"Browser","correlationId":"fa8655ba-9709-4798-9b0b-46987c238ba1","conditionalAccessStatus":"success","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"Windows Azure Active Directory","resourceId":"00000002-0000-0000-c000-000000000000","status":{"errorCode":0,"failureReason":"Other.","additionalDetails":null},"deviceDetail":{"deviceId":"7976bbb4-fe1d-421f-b383-e256509b8e41","displayName":"CSC-R9TTC0JSDPJ","operatingSystem":"Android","browser":"Chrome Mobile 150.0.0","isCompliant":true,"isManaged":true,"trustType":"Azure AD registered"},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[{"id":"7d491c7a-ad90-4420-9990-40a1e676a76c","displayName":"CSC - Caregiver sign-in frequency 8h","enforcedGrantControls":[],"enforcedSessionControls":["SignInFrequency"],"result":"success"},{"id":"ed1fe97a-9d99-408c-ae18-139d42f41803","displayName":"Microsoft-managed: Block legacy authentication","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1be9295c-b23b-42ac-80a3-888eeb2003de","displayName":"Microsoft-managed: Require phishing-resistant multifactor authentication for admins","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notApplied"},{"id":"76f1dd72-4003-4984-bb4a-6fcead072c2c","displayName":"Require MFA when risky sign-ins are detected","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"3154dc8f-7321-42c9-adf4-a2517944a92c","displayName":"Require MFA for admins","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"9f123001-a95f-4e50-9860-4dd2254cccad","displayName":"Require MFA and a password change when high-risk users are detected","enforcedGrantControls":["MfaAndChangePassword"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"49acf60d-3159-4ac9-8d48-35aa249e3209","displayName":"Require MFA for external and guest users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"0a16bb5c-c7d2-4942-aa2a-b0551b872933","displayName":"Block all legacy sign-ins that don't support MFA","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"7e87a1c7-4836-49df-8769-c4cccadd9dbe","displayName":"Require multifactor authentication for all users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"ede985e2-ee7e-4521-88b2-34c847c3db20","displayName":"CSC - Block caregivers on non-compliant device","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notEnabled"},{"id":"e35614e1-e896-4a13-9407-076963af488f","displayName":"CSC - Block caregivers off Cascades network","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1b7fd025-1aad-47c8-9274-c32c3e0b163c","displayName":"CSC - Caregivers: allow-listed devices only (TEST GROUP)","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"}]},{"id":"890b4008-1e4a-409b-953a-1535cf6e3c00","createdDateTime":"2026-07-14T16:34:55Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"29d9ed98-a469-4536-ade2-f981bc1d605e","appDisplayName":"Microsoft Authentication Broker","ipAddress":"184.191.143.62","clientAppUsed":"Mobile Apps and Desktop clients","correlationId":"6d9dff84-b425-4041-bf1a-79bc76b88695","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"","resourceId":"90a2e5d2-fd7a-4a2e-bc90-3dc50ae8e3ee","status":{"errorCode":0,"failureReason":"Other.","additionalDetails":null},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 150.0.7871","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[]},{"id":"9e48660a-5604-48e8-8f24-8d70a9dd3900","createdDateTime":"2026-07-14T16:34:22Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"29d9ed98-a469-4536-ade2-f981bc1d605e","appDisplayName":"Microsoft Authentication Broker","ipAddress":"184.191.143.62","clientAppUsed":"Mobile Apps and Desktop clients","correlationId":"6d9dff84-b425-4041-bf1a-79bc76b88695","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"","resourceId":"90a2e5d2-fd7a-4a2e-bc90-3dc50ae8e3ee","status":{"errorCode":50126,"failureReason":"Error validating credentials due to invalid username or password.","additionalDetails":"The user didn't enter the right credentials. \u00A0It's expected to see some number of these errors in your logs due to users making mistakes."},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 150.0.7871","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[]},{"id":"59d04b35-4eef-42aa-9216-7f0aabcd3400","createdDateTime":"2026-07-14T13:29:14Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"29d9ed98-a469-4536-ade2-f981bc1d605e","appDisplayName":"Microsoft Authentication Broker","ipAddress":"184.191.143.62","clientAppUsed":"Mobile Apps and Desktop clients","correlationId":"0ca64f34-4e87-4da1-a35d-1fffb41aef82","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"","resourceId":"90a2e5d2-fd7a-4a2e-bc90-3dc50ae8e3ee","status":{"errorCode":50126,"failureReason":"Error validating credentials due to invalid username or password.","additionalDetails":"The user didn't enter the right credentials. \u00A0It's expected to see some number of these errors in your logs due to users making mistakes."},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 150.0.7871","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[]},{"id":"5ab6d988-7056-4e58-8036-e236b9c03500","createdDateTime":"2026-07-14T13:24:03Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"29d9ed98-a469-4536-ade2-f981bc1d605e","appDisplayName":"Microsoft Authentication Broker","ipAddress":"184.191.143.62","clientAppUsed":"Mobile Apps and Desktop clients","correlationId":"0ca64f34-4e87-4da1-a35d-1fffb41aef82","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"","resourceId":"90a2e5d2-fd7a-4a2e-bc90-3dc50ae8e3ee","status":{"errorCode":50126,"failureReason":"Error validating credentials due to invalid username or password.","additionalDetails":"The user didn't enter the right credentials. \u00A0It's expected to see some number of these errors in your logs due to users making mistakes."},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 150.0.7871","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[]},{"id":"ef929dd5-3989-43b4-9c23-11d3124d3600","createdDateTime":"2026-07-14T13:23:19Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"29d9ed98-a469-4536-ade2-f981bc1d605e","appDisplayName":"Microsoft Authentication Broker","ipAddress":"184.191.143.62","clientAppUsed":"Mobile Apps and Desktop clients","correlationId":"0ca64f34-4e87-4da1-a35d-1fffb41aef82","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"","resourceId":"90a2e5d2-fd7a-4a2e-bc90-3dc50ae8e3ee","status":{"errorCode":50126,"failureReason":"Error validating credentials due to invalid username or password.","additionalDetails":"The user didn't enter the right credentials. \u00A0It's expected to see some number of these errors in your logs due to users making mistakes."},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 150.0.7871","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[]},{"id":"4b440e1b-01d9-4ef5-96b3-9e6a674a1000","createdDateTime":"2026-07-14T13:22:48Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"29d9ed98-a469-4536-ade2-f981bc1d605e","appDisplayName":"Microsoft Authentication Broker","ipAddress":"184.191.143.62","clientAppUsed":"Mobile Apps and Desktop clients","correlationId":"0ca64f34-4e87-4da1-a35d-1fffb41aef82","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"","resourceId":"90a2e5d2-fd7a-4a2e-bc90-3dc50ae8e3ee","status":{"errorCode":50126,"failureReason":"Error validating credentials due to invalid username or password.","additionalDetails":"The user didn't enter the right credentials. \u00A0It's expected to see some number of these errors in your logs due to users making mistakes."},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 150.0.7871","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[]},{"id":"79c66cc1-f40b-45ec-b1c4-3a2a718b3600","createdDateTime":"2026-07-14T13:22:11Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"29d9ed98-a469-4536-ade2-f981bc1d605e","appDisplayName":"Microsoft Authentication Broker","ipAddress":"184.191.143.62","clientAppUsed":"Mobile Apps and Desktop clients","correlationId":"0ca64f34-4e87-4da1-a35d-1fffb41aef82","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"","resourceId":"90a2e5d2-fd7a-4a2e-bc90-3dc50ae8e3ee","status":{"errorCode":50126,"failureReason":"Error validating credentials due to invalid username or password.","additionalDetails":"The user didn't enter the right credentials. \u00A0It's expected to see some number of these errors in your logs due to users making mistakes."},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 150.0.7871","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[]},{"id":"2b0fd13e-0d64-4185-bc76-1c0795644000","createdDateTime":"2026-07-14T13:21:47Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"29d9ed98-a469-4536-ade2-f981bc1d605e","appDisplayName":"Microsoft Authentication Broker","ipAddress":"184.191.143.62","clientAppUsed":"Mobile Apps and Desktop clients","correlationId":"0ca64f34-4e87-4da1-a35d-1fffb41aef82","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"","resourceId":"90a2e5d2-fd7a-4a2e-bc90-3dc50ae8e3ee","status":{"errorCode":50126,"failureReason":"Error validating credentials due to invalid username or password.","additionalDetails":"The user didn't enter the right credentials. \u00A0It's expected to see some number of these errors in your logs due to users making mistakes."},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 150.0.7871","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[]},{"id":"d0a641f6-dedd-49a8-aa4b-722ccd4c3500","createdDateTime":"2026-07-14T13:21:20Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"29d9ed98-a469-4536-ade2-f981bc1d605e","appDisplayName":"Microsoft Authentication Broker","ipAddress":"184.191.143.62","clientAppUsed":"Mobile Apps and Desktop clients","correlationId":"0ca64f34-4e87-4da1-a35d-1fffb41aef82","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"","resourceId":"90a2e5d2-fd7a-4a2e-bc90-3dc50ae8e3ee","status":{"errorCode":50126,"failureReason":"Error validating credentials due to invalid username or password.","additionalDetails":"The user didn't enter the right credentials. \u00A0It's expected to see some number of these errors in your logs due to users making mistakes."},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 150.0.7871","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[]},{"id":"ef929dd5-3989-43b4-9c23-11d37f333600","createdDateTime":"2026-07-14T13:20:12Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"29d9ed98-a469-4536-ade2-f981bc1d605e","appDisplayName":"Microsoft Authentication Broker","ipAddress":"184.191.143.62","clientAppUsed":"Mobile Apps and Desktop clients","correlationId":"0ca64f34-4e87-4da1-a35d-1fffb41aef82","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"","resourceId":"90a2e5d2-fd7a-4a2e-bc90-3dc50ae8e3ee","status":{"errorCode":50126,"failureReason":"Error validating credentials due to invalid username or password.","additionalDetails":"The user didn't enter the right credentials. \u00A0It's expected to see some number of these errors in your logs due to users making mistakes."},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 150.0.7871","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[]},{"id":"685f3618-fb39-4e8a-95c4-1eaa699a1d00","createdDateTime":"2026-07-13T16:30:47Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"d5108493-cba8-4f08-90b6-1bb0bc09eb2a","appDisplayName":"Cascades of Tucson - ALIS SSO","ipAddress":"184.191.143.62","clientAppUsed":"Browser","correlationId":"9cf13233-b581-4ff1-b40d-69069ae46fbd","conditionalAccessStatus":"success","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"Windows Azure Active Directory","resourceId":"00000002-0000-0000-c000-000000000000","status":{"errorCode":0,"failureReason":"Other.","additionalDetails":null},"deviceDetail":{"deviceId":"7976bbb4-fe1d-421f-b383-e256509b8e41","displayName":"CSC-R9TTC0JSDPJ","operatingSystem":"Android","browser":"Chrome Mobile 149.0.0","isCompliant":true,"isManaged":true,"trustType":"Azure AD registered"},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[{"id":"7d491c7a-ad90-4420-9990-40a1e676a76c","displayName":"CSC - Caregiver sign-in frequency 8h","enforcedGrantControls":[],"enforcedSessionControls":["SignInFrequency"],"result":"success"},{"id":"ed1fe97a-9d99-408c-ae18-139d42f41803","displayName":"Microsoft-managed: Block legacy authentication","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1be9295c-b23b-42ac-80a3-888eeb2003de","displayName":"Microsoft-managed: Require phishing-resistant multifactor authentication for admins","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notApplied"},{"id":"76f1dd72-4003-4984-bb4a-6fcead072c2c","displayName":"Require MFA when risky sign-ins are detected","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"3154dc8f-7321-42c9-adf4-a2517944a92c","displayName":"Require MFA for admins","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"9f123001-a95f-4e50-9860-4dd2254cccad","displayName":"Require MFA and a password change when high-risk users are detected","enforcedGrantControls":["MfaAndChangePassword"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"49acf60d-3159-4ac9-8d48-35aa249e3209","displayName":"Require MFA for external and guest users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"0a16bb5c-c7d2-4942-aa2a-b0551b872933","displayName":"Block all legacy sign-ins that don't support MFA","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"7e87a1c7-4836-49df-8769-c4cccadd9dbe","displayName":"Require multifactor authentication for all users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"e35614e1-e896-4a13-9407-076963af488f","displayName":"CSC - Block caregivers off Cascades network","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"ede985e2-ee7e-4521-88b2-34c847c3db20","displayName":"CSC - Block caregivers on non-compliant device","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notEnabled"},{"id":"1b7fd025-1aad-47c8-9274-c32c3e0b163c","displayName":"CSC - Caregivers: allow-listed devices only (TEST GROUP)","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"}]},{"id":"09af6ead-26a8-4521-97b3-b108231e1f00","createdDateTime":"2026-07-13T16:30:23Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"29d9ed98-a469-4536-ade2-f981bc1d605e","appDisplayName":"Microsoft Authentication Broker","ipAddress":"184.191.143.62","clientAppUsed":"Mobile Apps and Desktop clients","correlationId":"1c2da33e-996a-4790-aca7-32777d57b7f6","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"","resourceId":"90a2e5d2-fd7a-4a2e-bc90-3dc50ae8e3ee","status":{"errorCode":0,"failureReason":"Other.","additionalDetails":null},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 149.0.7827","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[]},{"id":"62b6a64c-c72e-4283-a240-bf65b0c81300","createdDateTime":"2026-07-13T13:12:40Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"d5108493-cba8-4f08-90b6-1bb0bc09eb2a","appDisplayName":"Cascades of Tucson - ALIS SSO","ipAddress":"184.191.143.62","clientAppUsed":"Browser","correlationId":"8026ec38-d160-4d69-9042-d65df5a2dbd2","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"Windows Azure Active Directory","resourceId":"00000002-0000-0000-c000-000000000000","status":{"errorCode":50126,"failureReason":"Error validating credentials due to invalid username or password.","additionalDetails":"The user didn't enter the right credentials. \u00A0It's expected to see some number of these errors in your logs due to users making mistakes."},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 149.0.0","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[]},{"id":"10a139fd-ea44-455c-a7e6-f3b3560e1600","createdDateTime":"2026-07-13T13:12:07Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"d5108493-cba8-4f08-90b6-1bb0bc09eb2a","appDisplayName":"Cascades of Tucson - ALIS SSO","ipAddress":"184.191.143.62","clientAppUsed":"Browser","correlationId":"8026ec38-d160-4d69-9042-d65df5a2dbd2","conditionalAccessStatus":"success","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"Windows Azure Active Directory","resourceId":"00000002-0000-0000-c000-000000000000","status":{"errorCode":70044,"failureReason":"The session has expired or is invalid due to sign-in frequency checks by conditional access.","additionalDetails":null},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 149.0.0","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[{"id":"7d491c7a-ad90-4420-9990-40a1e676a76c","displayName":"CSC - Caregiver sign-in frequency 8h","enforcedGrantControls":[],"enforcedSessionControls":["SignInFrequency"],"result":"success"},{"id":"ed1fe97a-9d99-408c-ae18-139d42f41803","displayName":"Microsoft-managed: Block legacy authentication","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1be9295c-b23b-42ac-80a3-888eeb2003de","displayName":"Microsoft-managed: Require phishing-resistant multifactor authentication for admins","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notApplied"},{"id":"76f1dd72-4003-4984-bb4a-6fcead072c2c","displayName":"Require MFA when risky sign-ins are detected","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"3154dc8f-7321-42c9-adf4-a2517944a92c","displayName":"Require MFA for admins","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"9f123001-a95f-4e50-9860-4dd2254cccad","displayName":"Require MFA and a password change when high-risk users are detected","enforcedGrantControls":["MfaAndChangePassword"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"49acf60d-3159-4ac9-8d48-35aa249e3209","displayName":"Require MFA for external and guest users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"0a16bb5c-c7d2-4942-aa2a-b0551b872933","displayName":"Block all legacy sign-ins that don't support MFA","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"7e87a1c7-4836-49df-8769-c4cccadd9dbe","displayName":"Require multifactor authentication for all users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"ede985e2-ee7e-4521-88b2-34c847c3db20","displayName":"CSC - Block caregivers on non-compliant device","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notEnabled"},{"id":"e35614e1-e896-4a13-9407-076963af488f","displayName":"CSC - Block caregivers off Cascades network","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1b7fd025-1aad-47c8-9274-c32c3e0b163c","displayName":"CSC - Caregivers: allow-listed devices only (TEST GROUP)","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"}]},{"id":"dfa16965-6ce7-4a8c-9994-1512ec401700","createdDateTime":"2026-07-13T13:10:28Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"d5108493-cba8-4f08-90b6-1bb0bc09eb2a","appDisplayName":"Cascades of Tucson - ALIS SSO","ipAddress":"184.191.143.62","clientAppUsed":"Browser","correlationId":"3eceb0ab-eebb-41c5-af4c-132c2004220d","conditionalAccessStatus":"success","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"Windows Azure Active Directory","resourceId":"00000002-0000-0000-c000-000000000000","status":{"errorCode":70044,"failureReason":"The session has expired or is invalid due to sign-in frequency checks by conditional access.","additionalDetails":null},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 149.0.0","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[{"id":"7d491c7a-ad90-4420-9990-40a1e676a76c","displayName":"CSC - Caregiver sign-in frequency 8h","enforcedGrantControls":[],"enforcedSessionControls":["SignInFrequency"],"result":"success"},{"id":"ed1fe97a-9d99-408c-ae18-139d42f41803","displayName":"Microsoft-managed: Block legacy authentication","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1be9295c-b23b-42ac-80a3-888eeb2003de","displayName":"Microsoft-managed: Require phishing-resistant multifactor authentication for admins","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notApplied"},{"id":"76f1dd72-4003-4984-bb4a-6fcead072c2c","displayName":"Require MFA when risky sign-ins are detected","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"3154dc8f-7321-42c9-adf4-a2517944a92c","displayName":"Require MFA for admins","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"9f123001-a95f-4e50-9860-4dd2254cccad","displayName":"Require MFA and a password change when high-risk users are detected","enforcedGrantControls":["MfaAndChangePassword"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"49acf60d-3159-4ac9-8d48-35aa249e3209","displayName":"Require MFA for external and guest users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"0a16bb5c-c7d2-4942-aa2a-b0551b872933","displayName":"Block all legacy sign-ins that don't support MFA","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"7e87a1c7-4836-49df-8769-c4cccadd9dbe","displayName":"Require multifactor authentication for all users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"ede985e2-ee7e-4521-88b2-34c847c3db20","displayName":"CSC - Block caregivers on non-compliant device","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notEnabled"},{"id":"e35614e1-e896-4a13-9407-076963af488f","displayName":"CSC - Block caregivers off Cascades network","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1b7fd025-1aad-47c8-9274-c32c3e0b163c","displayName":"CSC - Caregivers: allow-listed devices only (TEST GROUP)","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"}]},{"id":"1b463e0d-ce81-430f-b532-8f4df8b61300","createdDateTime":"2026-07-13T13:10:27Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"d5108493-cba8-4f08-90b6-1bb0bc09eb2a","appDisplayName":"Cascades of Tucson - ALIS SSO","ipAddress":"184.191.143.62","clientAppUsed":"Browser","correlationId":"805b9aca-0fc6-480e-8607-6fef1ee3781f","conditionalAccessStatus":"success","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"Windows Azure Active Directory","resourceId":"00000002-0000-0000-c000-000000000000","status":{"errorCode":70044,"failureReason":"The session has expired or is invalid due to sign-in frequency checks by conditional access.","additionalDetails":null},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 149.0.0","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[{"id":"7d491c7a-ad90-4420-9990-40a1e676a76c","displayName":"CSC - Caregiver sign-in frequency 8h","enforcedGrantControls":[],"enforcedSessionControls":["SignInFrequency"],"result":"success"},{"id":"ed1fe97a-9d99-408c-ae18-139d42f41803","displayName":"Microsoft-managed: Block legacy authentication","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1be9295c-b23b-42ac-80a3-888eeb2003de","displayName":"Microsoft-managed: Require phishing-resistant multifactor authentication for admins","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notApplied"},{"id":"76f1dd72-4003-4984-bb4a-6fcead072c2c","displayName":"Require MFA when risky sign-ins are detected","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"3154dc8f-7321-42c9-adf4-a2517944a92c","displayName":"Require MFA for admins","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"9f123001-a95f-4e50-9860-4dd2254cccad","displayName":"Require MFA and a password change when high-risk users are detected","enforcedGrantControls":["MfaAndChangePassword"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"49acf60d-3159-4ac9-8d48-35aa249e3209","displayName":"Require MFA for external and guest users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"0a16bb5c-c7d2-4942-aa2a-b0551b872933","displayName":"Block all legacy sign-ins that don't support MFA","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"7e87a1c7-4836-49df-8769-c4cccadd9dbe","displayName":"Require multifactor authentication for all users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"e35614e1-e896-4a13-9407-076963af488f","displayName":"CSC - Block caregivers off Cascades network","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"ede985e2-ee7e-4521-88b2-34c847c3db20","displayName":"CSC - Block caregivers on non-compliant device","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notEnabled"},{"id":"1b7fd025-1aad-47c8-9274-c32c3e0b163c","displayName":"CSC - Caregivers: allow-listed devices only (TEST GROUP)","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"}]},{"id":"65fba340-f8a4-4229-aa82-7e6a25620500","createdDateTime":"2026-07-12T20:39:30Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"d5108493-cba8-4f08-90b6-1bb0bc09eb2a","appDisplayName":"Cascades of Tucson - ALIS SSO","ipAddress":"184.191.143.62","clientAppUsed":"Browser","correlationId":"66f1a42a-2549-4c43-88c4-24249fc6f110","conditionalAccessStatus":"success","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"Windows Azure Active Directory","resourceId":"00000002-0000-0000-c000-000000000000","status":{"errorCode":0,"failureReason":"Other.","additionalDetails":null},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 149.0.0","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[{"id":"7d491c7a-ad90-4420-9990-40a1e676a76c","displayName":"CSC - Caregiver sign-in frequency 8h","enforcedGrantControls":[],"enforcedSessionControls":["SignInFrequency"],"result":"success"},{"id":"ed1fe97a-9d99-408c-ae18-139d42f41803","displayName":"Microsoft-managed: Block legacy authentication","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1be9295c-b23b-42ac-80a3-888eeb2003de","displayName":"Microsoft-managed: Require phishing-resistant multifactor authentication for admins","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notApplied"},{"id":"76f1dd72-4003-4984-bb4a-6fcead072c2c","displayName":"Require MFA when risky sign-ins are detected","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"3154dc8f-7321-42c9-adf4-a2517944a92c","displayName":"Require MFA for admins","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"9f123001-a95f-4e50-9860-4dd2254cccad","displayName":"Require MFA and a password change when high-risk users are detected","enforcedGrantControls":["MfaAndChangePassword"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"49acf60d-3159-4ac9-8d48-35aa249e3209","displayName":"Require MFA for external and guest users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"0a16bb5c-c7d2-4942-aa2a-b0551b872933","displayName":"Block all legacy sign-ins that don't support MFA","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"7e87a1c7-4836-49df-8769-c4cccadd9dbe","displayName":"Require multifactor authentication for all users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"ede985e2-ee7e-4521-88b2-34c847c3db20","displayName":"CSC - Block caregivers on non-compliant device","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notEnabled"},{"id":"e35614e1-e896-4a13-9407-076963af488f","displayName":"CSC - Block caregivers off Cascades network","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1b7fd025-1aad-47c8-9274-c32c3e0b163c","displayName":"CSC - Caregivers: allow-listed devices only (TEST GROUP)","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"}]},{"id":"3472a11e-ea80-4cc6-8af3-d77e971a0200","createdDateTime":"2026-07-12T16:58:50Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"d5108493-cba8-4f08-90b6-1bb0bc09eb2a","appDisplayName":"Cascades of Tucson - ALIS SSO","ipAddress":"184.191.143.62","clientAppUsed":"Browser","correlationId":"34a3f22e-32e8-45bb-a04d-3a007f72f703","conditionalAccessStatus":"success","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"Windows Azure Active Directory","resourceId":"00000002-0000-0000-c000-000000000000","status":{"errorCode":0,"failureReason":"Other.","additionalDetails":null},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 149.0.0","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[{"id":"7d491c7a-ad90-4420-9990-40a1e676a76c","displayName":"CSC - Caregiver sign-in frequency 8h","enforcedGrantControls":[],"enforcedSessionControls":["SignInFrequency"],"result":"success"},{"id":"ed1fe97a-9d99-408c-ae18-139d42f41803","displayName":"Microsoft-managed: Block legacy authentication","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1be9295c-b23b-42ac-80a3-888eeb2003de","displayName":"Microsoft-managed: Require phishing-resistant multifactor authentication for admins","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notApplied"},{"id":"76f1dd72-4003-4984-bb4a-6fcead072c2c","displayName":"Require MFA when risky sign-ins are detected","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"3154dc8f-7321-42c9-adf4-a2517944a92c","displayName":"Require MFA for admins","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"9f123001-a95f-4e50-9860-4dd2254cccad","displayName":"Require MFA and a password change when high-risk users are detected","enforcedGrantControls":["MfaAndChangePassword"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"49acf60d-3159-4ac9-8d48-35aa249e3209","displayName":"Require MFA for external and guest users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"0a16bb5c-c7d2-4942-aa2a-b0551b872933","displayName":"Block all legacy sign-ins that don't support MFA","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"7e87a1c7-4836-49df-8769-c4cccadd9dbe","displayName":"Require multifactor authentication for all users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"ede985e2-ee7e-4521-88b2-34c847c3db20","displayName":"CSC - Block caregivers on non-compliant device","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notEnabled"},{"id":"e35614e1-e896-4a13-9407-076963af488f","displayName":"CSC - Block caregivers off Cascades network","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1b7fd025-1aad-47c8-9274-c32c3e0b163c","displayName":"CSC - Caregivers: allow-listed devices only (TEST GROUP)","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"}]},{"id":"8e743bff-c0fc-475b-9151-79bd76870100","createdDateTime":"2026-07-12T16:08:56Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"d5108493-cba8-4f08-90b6-1bb0bc09eb2a","appDisplayName":"Cascades of Tucson - ALIS SSO","ipAddress":"184.191.143.62","clientAppUsed":"Browser","correlationId":"cecd08b4-b13a-49dc-a5fd-dfbc45c8e604","conditionalAccessStatus":"success","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"Windows Azure Active Directory","resourceId":"00000002-0000-0000-c000-000000000000","status":{"errorCode":0,"failureReason":"Other.","additionalDetails":null},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 149.0.0","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[{"id":"7d491c7a-ad90-4420-9990-40a1e676a76c","displayName":"CSC - Caregiver sign-in frequency 8h","enforcedGrantControls":[],"enforcedSessionControls":["SignInFrequency"],"result":"success"},{"id":"ed1fe97a-9d99-408c-ae18-139d42f41803","displayName":"Microsoft-managed: Block legacy authentication","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1be9295c-b23b-42ac-80a3-888eeb2003de","displayName":"Microsoft-managed: Require phishing-resistant multifactor authentication for admins","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notApplied"},{"id":"76f1dd72-4003-4984-bb4a-6fcead072c2c","displayName":"Require MFA when risky sign-ins are detected","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"3154dc8f-7321-42c9-adf4-a2517944a92c","displayName":"Require MFA for admins","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"9f123001-a95f-4e50-9860-4dd2254cccad","displayName":"Require MFA and a password change when high-risk users are detected","enforcedGrantControls":["MfaAndChangePassword"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"49acf60d-3159-4ac9-8d48-35aa249e3209","displayName":"Require MFA for external and guest users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"0a16bb5c-c7d2-4942-aa2a-b0551b872933","displayName":"Block all legacy sign-ins that don't support MFA","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"7e87a1c7-4836-49df-8769-c4cccadd9dbe","displayName":"Require multifactor authentication for all users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"ede985e2-ee7e-4521-88b2-34c847c3db20","displayName":"CSC - Block caregivers on non-compliant device","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notEnabled"},{"id":"e35614e1-e896-4a13-9407-076963af488f","displayName":"CSC - Block caregivers off Cascades network","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1b7fd025-1aad-47c8-9274-c32c3e0b163c","displayName":"CSC - Caregivers: allow-listed devices only (TEST GROUP)","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"}]},{"id":"98605def-48a8-4d0b-93b6-9d2aadc31500","createdDateTime":"2026-07-12T16:08:17Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"d5108493-cba8-4f08-90b6-1bb0bc09eb2a","appDisplayName":"Cascades of Tucson - ALIS SSO","ipAddress":"184.191.143.62","clientAppUsed":"Browser","correlationId":"cecd08b4-b13a-49dc-a5fd-dfbc45c8e604","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"Windows Azure Active Directory","resourceId":"00000002-0000-0000-c000-000000000000","status":{"errorCode":50089,"failureReason":"Authentication failed due to flow token expired.","additionalDetails":"Expected - auth codes, refresh tokens, and sessions expire over time or are revoked by the user or an admin. The app will request a new login from the user."},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 149.0.0","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.46926,"longitude":-111.9954}},"appliedConditionalAccessPolicies":[]},{"id":"13914195-92d3-4073-9479-8d2965a70600","createdDateTime":"2026-07-11T17:02:24Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"d5108493-cba8-4f08-90b6-1bb0bc09eb2a","appDisplayName":"Cascades of Tucson - ALIS SSO","ipAddress":"184.191.143.62","clientAppUsed":"Browser","correlationId":"5ad5f866-9506-409d-8be1-ef172983d9d2","conditionalAccessStatus":"success","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"Windows Azure Active Directory","resourceId":"00000002-0000-0000-c000-000000000000","status":{"errorCode":0,"failureReason":"Other.","additionalDetails":null},"deviceDetail":{"deviceId":"7976bbb4-fe1d-421f-b383-e256509b8e41","displayName":"CSC-R9TTC0JSDPJ","operatingSystem":"Android","browser":"Chrome Mobile 149.0.0","isCompliant":true,"isManaged":true,"trustType":"Azure AD registered"},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.50938,"longitude":-112.08255}},"appliedConditionalAccessPolicies":[{"id":"7d491c7a-ad90-4420-9990-40a1e676a76c","displayName":"CSC - Caregiver sign-in frequency 8h","enforcedGrantControls":[],"enforcedSessionControls":["SignInFrequency"],"result":"success"},{"id":"ed1fe97a-9d99-408c-ae18-139d42f41803","displayName":"Microsoft-managed: Block legacy authentication","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1be9295c-b23b-42ac-80a3-888eeb2003de","displayName":"Microsoft-managed: Require phishing-resistant multifactor authentication for admins","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notApplied"},{"id":"76f1dd72-4003-4984-bb4a-6fcead072c2c","displayName":"Require MFA when risky sign-ins are detected","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"3154dc8f-7321-42c9-adf4-a2517944a92c","displayName":"Require MFA for admins","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"9f123001-a95f-4e50-9860-4dd2254cccad","displayName":"Require MFA and a password change when high-risk users are detected","enforcedGrantControls":["MfaAndChangePassword"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"0a16bb5c-c7d2-4942-aa2a-b0551b872933","displayName":"Block all legacy sign-ins that don't support MFA","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"49acf60d-3159-4ac9-8d48-35aa249e3209","displayName":"Require MFA for external and guest users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"7e87a1c7-4836-49df-8769-c4cccadd9dbe","displayName":"Require multifactor authentication for all users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"e35614e1-e896-4a13-9407-076963af488f","displayName":"CSC - Block caregivers off Cascades network","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"ede985e2-ee7e-4521-88b2-34c847c3db20","displayName":"CSC - Block caregivers on non-compliant device","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notEnabled"},{"id":"1b7fd025-1aad-47c8-9274-c32c3e0b163c","displayName":"CSC - Caregivers: allow-listed devices only (TEST GROUP)","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"}]},{"id":"5d661f21-5a78-447f-af89-d370b3440200","createdDateTime":"2026-07-11T13:02:27Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"29d9ed98-a469-4536-ade2-f981bc1d605e","appDisplayName":"Microsoft Authentication Broker","ipAddress":"184.191.143.62","clientAppUsed":"Mobile Apps and Desktop clients","correlationId":"43c3940f-75fe-486c-ae95-b524f4a7cfcf","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"","resourceId":"90a2e5d2-fd7a-4a2e-bc90-3dc50ae8e3ee","status":{"errorCode":0,"failureReason":"Other.","additionalDetails":null},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 149.0.7827","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.50938,"longitude":-112.08255}},"appliedConditionalAccessPolicies":[]},{"id":"2d355484-c6e2-42ab-93dd-7a675df40200","createdDateTime":"2026-07-11T13:02:17Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"29d9ed98-a469-4536-ade2-f981bc1d605e","appDisplayName":"Microsoft Authentication Broker","ipAddress":"184.191.143.62","clientAppUsed":"Mobile Apps and Desktop clients","correlationId":"45b30124-712f-41a6-808e-9ce3ffef0933","conditionalAccessStatus":"notApplied","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"","resourceId":"90a2e5d2-fd7a-4a2e-bc90-3dc50ae8e3ee","status":{"errorCode":0,"failureReason":"Other.","additionalDetails":null},"deviceDetail":{"deviceId":"","displayName":"","operatingSystem":"Android","browser":"Chrome Mobile 149.0.7827","isCompliant":false,"isManaged":false,"trustType":null},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.50938,"longitude":-112.08255}},"appliedConditionalAccessPolicies":[]},{"id":"f705b26e-8276-4a83-bc5b-449ebcb00300","createdDateTime":"2026-07-11T13:00:05Z","userDisplayName":"Agnes McFerren","userPrincipalName":"a.mcferren@cascadestucson.com","userId":"a6629fde-4350-4179-93fd-de30d37dd1c3","appId":"d5108493-cba8-4f08-90b6-1bb0bc09eb2a","appDisplayName":"Cascades of Tucson - ALIS SSO","ipAddress":"184.191.143.62","clientAppUsed":"Browser","correlationId":"a9444d17-08ba-4b2c-9d53-e034dfbb94d9","conditionalAccessStatus":"success","isInteractive":true,"riskDetail":"none","riskLevelAggregated":"none","riskLevelDuringSignIn":"none","riskState":"none","riskEventTypes":[],"riskEventTypes_v2":[],"resourceDisplayName":"Windows Azure Active Directory","resourceId":"00000002-0000-0000-c000-000000000000","status":{"errorCode":0,"failureReason":"Other.","additionalDetails":null},"deviceDetail":{"deviceId":"7976bbb4-fe1d-421f-b383-e256509b8e41","displayName":"CSC-R9TTC0JSDPJ","operatingSystem":"Android","browser":"Chrome Mobile 149.0.0","isCompliant":true,"isManaged":true,"trustType":"Azure AD registered"},"location":{"city":"Phoenix","state":"Arizona","countryOrRegion":"US","geoCoordinates":{"altitude":null,"latitude":33.50938,"longitude":-112.08255}},"appliedConditionalAccessPolicies":[{"id":"7d491c7a-ad90-4420-9990-40a1e676a76c","displayName":"CSC - Caregiver sign-in frequency 8h","enforcedGrantControls":[],"enforcedSessionControls":["SignInFrequency"],"result":"success"},{"id":"ed1fe97a-9d99-408c-ae18-139d42f41803","displayName":"Microsoft-managed: Block legacy authentication","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"1be9295c-b23b-42ac-80a3-888eeb2003de","displayName":"Microsoft-managed: Require phishing-resistant multifactor authentication for admins","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notApplied"},{"id":"76f1dd72-4003-4984-bb4a-6fcead072c2c","displayName":"Require MFA when risky sign-ins are detected","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"3154dc8f-7321-42c9-adf4-a2517944a92c","displayName":"Require MFA for admins","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"9f123001-a95f-4e50-9860-4dd2254cccad","displayName":"Require MFA and a password change when high-risk users are detected","enforcedGrantControls":["MfaAndChangePassword"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"0a16bb5c-c7d2-4942-aa2a-b0551b872933","displayName":"Block all legacy sign-ins that don't support MFA","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"49acf60d-3159-4ac9-8d48-35aa249e3209","displayName":"Require MFA for external and guest users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"7e87a1c7-4836-49df-8769-c4cccadd9dbe","displayName":"Require multifactor authentication for all users","enforcedGrantControls":["Mfa"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"e35614e1-e896-4a13-9407-076963af488f","displayName":"CSC - Block caregivers off Cascades network","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"},{"id":"ede985e2-ee7e-4521-88b2-34c847c3db20","displayName":"CSC - Block caregivers on non-compliant device","enforcedGrantControls":[],"enforcedSessionControls":[],"result":"notEnabled"},{"id":"1b7fd025-1aad-47c8-9274-c32c3e0b163c","displayName":"CSC - Caregivers: allow-listed devices only (TEST GROUP)","enforcedGrantControls":["Block"],"enforcedSessionControls":[],"result":"notApplied"}]}]} |