# Registered Location Mismatch

Detects when an account's activity regularly comes from a location that differs from the registered location listed on the IDP or HRIS.

A user's working location is determined by evaluating the account's successful sign in activity over the past 90 days. User Location Prevalence is the ratio between a user's working location activity and their total successful sign in activity from any location over the past 90 days.

**Recommended Actions**

Please consider updating the registered location within HRIS or IDP if inaccurate, or speak to the employee about where they are regularly working from.\
\
**Default Check Settings**

Include Remote Employees: False

Include Hosting Events: True

User Location Prevalence Threshold (Percentage): 51

**Compatibility**

[Okta](/integrations/okta-data-integration.md)

[Microsoft Entra ID](/integrations/azure-active-directory-integration.md)

<figure><img src="/files/jQNv8wW4AV7bUBZdn8hk" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.oort.io/understanding-check-failures/oort-insights/identity-threat-detection-insights/registered-location-mismatch.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.