Sign-in Attempt History On Authenticator App

To identify which account triggered a sign-in request in the Microsoft Authenticator app, you can follow these steps:

1. Open the Microsoft Authenticator app on your iPhone.
2. Check for notifications: If you receive a notification for a sign-in attempt, you can tap on the notification. However, if it does not show the account, you may need to check the app directly.
3. View account details: In the app, you should see a list of accounts that you have added. You can tap on each account to see more details, which may help you identify which account is associated with the sign-in request.
4. Review sign-in logs: If you have access to the Microsoft Entra admin center, you can view the sign-in logs to see detailed information about sign-in attempts, including which accounts were involved. This can provide insights into the MFA requests and help you determine the source of the notifications.

If the notifications are not legitimate or if you suspect unauthorized access, it's advisable to change your passwords and enable additional security measures.

References:

• Authentication methods in Microsoft Entra ID - Microsoft Authenticator app
• Use the sign-in logs to review Microsoft Entra multifactor authentication events