User sign-ins (non-interactive) Sign-in IP shows mine but the service account is being used from another IP.

@Killian Moore ,

As far as I understand your query , you would like to understand that why do you see your IP address in the report for non-interactive sign-in in the reports rather than the IP of web service which is using the service account to call the API in the background.

This is because the sign-in logs have evolved to provide this information about the originator. Generally a service account is something which will process requests from all the users . Hence in case of any security audit requirement, it is difficult to find which user actually is making a request and the IP, the request originated. Hence in case of non-interactive logons, the information of the user(request originator) , the user's IP , the application initiating the request and the cloud side resources the app is trying to access. That is why you see the user's IP on behalf of which the request was initiated rather than the backend service principal IP . The idea is to provide details about the user on behalf of whom the non-interactive request was initiated as explained in the non-interactive signin section of the linked article you provided.

Hope the information helps. In case you feel that i have misunderstood your query or you have further questions , please feel free to continue the conversation in comments further and we will continue to help you on the same. If the information is helpful , please do accept the post as answer so that it improves the relevancy of the post and helps other members of the community searching for similar queries.

Thank you .

----------------------------------------------------------------------------------------------------------------------------------------------------------

• Please don't forget to click on whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how
• Want a reminder to come back and check responses? Here is how to subscribe to a notification
• If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators