Impossible Travel

Compares the IP geolocation of sign-in events for a user and raises a warning if they seem to have traveled between those places faster than what is physically possible. Identity Intelligence correlates information across IdPs and enriches this with external IP data to give the most accurate analysis of impossible travel.

This check takes into account user device history. If both devices involved in the anomalous travel sign-in events are known or previously seen, the user will not fail the check for those events.

User accounts failing this check may be compromised.

Please verify the origin and nature of the sign-in events. If the events do not appear to be from the appropriate end user, terminate the sessions and take other remediation measures as necessary.

Default Check Settings

Exclude known good IPs: false

Ignore list: 7 items

Compatibility

Okta

Entra ID

Duo

Salesforce

Last updated