Dashboard: User Profile data overview
The User Profile Data tab displays cloud profile data associated with each unique username. Use it to review user enrollments, track access history, and identify accounts that may need attention.
Note
For hybrid deployments, data only displays if you have a Microsoft Entra ID data store integrated in the Identity Platform.
What the User Profile Data tab shows
The tab lists all usernames with cloud profiles and their associated data. You can sort by User, Access History, Digital Fingerprints, Push Tokens, and OATH Tokens.
Click View all to see the full list.
 |
What healthy activity looks like
Healthy user profile data typically shows these patterns:
Steady profile count aligned with your user base. The total number of cloud profiles grows in line with user onboarding. Sudden jumps or drops may indicate provisioning issues or bulk account changes.
Active access history across users. Most profiles show recent access history entries, indicating users are authenticating regularly. Profiles with no access history may belong to inactive or orphaned accounts.
Expected device enrollment levels. Push token and OATH token counts align with your MFA deployment. If you've rolled out the Authenticate app, most active users should have push tokens.
Warning signs to watch for
Profiles with unusually high access history counts. A single user with significantly more access events than peers may indicate automated access, a shared account, or a compromised credential.
Profiles with no device enrollments despite MFA requirements. Users who should have enrolled devices but show zero push tokens or OATH tokens may be bypassing MFA or experiencing enrollment failures.
Unexpected digital fingerprint counts. A user with many digital fingerprints may be logging in from multiple devices or locations. This is expected for some roles but may warrant investigation for others.
View access history for a user profile
In the Identity Platform, go to Dashboard > User Profile Data.
Click View All to open the full list of user profiles.
In the Access History column, click the number next to the user you want to review.
The access history provides detailed login activity for each user, including the result (such as Success), IP address, timestamp of the login event, and the user agent string identifying the device and browser used.
What to do next
Warning sign | Where to investigate next |
|---|---|
Unusually high access history for a user | Click the access history count to review login details, then check the Login Data tab for the same user ID. |
Missing device enrollments | Authentication Types tab to check enrolled mobile and authenticator devices. |
Unexpected digital fingerprint count | Review the user's access history for login locations and devices, then check authentication policy settings. |