Registered Location Mismatch

Detects when an account's activity regularly comes from a location that differs from the registered location listed on the IDP or HRIS.

A user's working location is determined by evaluating the account's successful sign in activity over the past 90 days. User Location Prevalence is the ratio between a user's working location activity and their total successful sign in activity from any location over the past 90 days.

Recommended Actions

Please consider updating the registered location within HRIS or IDP if inaccurate, or speak to the employee about where they are regularly working from. Default Check Settings

Include Remote Employees: False

Include Hosting Events: True

User Location Prevalence Threshold (Percentage): 51

Compatibility

Duo

Microsoft Entra ID