rencore.com (opens in a new tab) Start a trial (opens in a new tab)

Risky sign-ins

Last updated Inventory Entra ID

AI summary

The Risky sign-ins segment identifies Entra ID sign-in attempts flagged as at risk. Use it to review risky authentication events in your Entra ID environment.

Primary segmentGenerally available

"Risky sign-ins" is a segment for Entra ID in Rencore Governance. Shows Sign-Ins with Risk State "At Risk".

What it selects

The segment selects Risky Entra ID sign-in objects from the Entra ID inventory.

The rule

Every Risky Entra ID Sign-In where Risk State equals 'atRisk'

In Rencore Governance

The Risky sign-ins segment in Rencore Governance: its rule, count, trend, violated policies and the objects it selects
The segment in a Rencore demo Environment, captured October 2026.

Details

SelectsRisky Entra ID sign-in
ConnectorEntra ID
CategoryNone
Primary segmentYes
RecommendedNo
StatusGenerally available
Name in Rencore GovernanceRisky Sign-Ins

Frequently asked questions

What does the risky sign-ins segment select?

The Risky sign-ins segment: shows Sign-Ins with Risk State "At Risk".

What is the rule of the risky sign-ins segment?

Every Risky Entra ID Sign-In where Risk State equals 'atRisk'.

Which objects does the risky sign-ins segment use?

The Risky sign-ins segment works on Risky Entra ID sign-in objects from the Entra ID inventory.

Which module includes the risky sign-ins segment?

The Risky sign-ins segment comes with the Entra ID connector in the Digital Workplace module of Rencore Governance, which every Plan includes.