Azure AD last login time

[asp]

Hi all,

How can I import the last login date time on an Azure account? Is there a direct attribute that can be mapped in the 'account attribute' section of the connection configuration? 

Thanks

[SB]

You can add lastSignInDateTime under ACCOUNT_IMPORT_FIELDS in the connection to fetch the value. You will also need to map this field in ACCOUNT_ATTRIBUTES section with the corresponding CP attribute.

[ejeong]

@SB 

Is that attribute in same api used to get all users?

Do we need REST connector? OOTb connector doesnt have that mapping.

[SB]

You need to add this in your AzureAD connection under ACCOUNT_IMPORT_FIELDS and ACCOUNT_ATTRIBUTES  parameter. It should be part of user api.

[asp]

This doesn't work in the OOTB Azure connector as the user - @ejeong  mentioned about. Do we need to use the REST connector for Azure to pull this attribute? 

[SB]

This should work if you have defined the field in both the parameters as mentioned previously. Under ACCOUNT_IMPORT_FIELDS and ACCOUNT_ATTRIBUTES  parameter. 

@ejeong Can you confirm if the value was still not fetched after making the changes.

[amit_krishnajit]

The signInActivity attribute in Azure AD may not be available in the GA Graph API and might only be a beta feature. To fetch this attribute, you may want to use the Beta Graph API in a REST connector. 

GET https://graph.microsoft.com/beta/users?$select=displayName,userPrincipalName,signInActivity

https://learn.microsoft.com/en-us/graph/api/user-list?view=graph-rest-beta&tabs=http