SecurityInsight settings · Settings > Collection scope & limits
Identity sign-in details
| Key | SI_EnableSignInEnrich |
|---|---|
| Where | Settings > Collection scope & limits > Extra details |
| Type | On / off |
| Default | On. |
| Edition | Community |
| Confirmation | SecurityInsight asks you to confirm before it is switched off. |
What it does
Lets the identity engine add sign-in statistics per user, such as sign-in counts, apps, IP addresses and countries.
When enabled
On is the default: it works as described under "What it does".
When disabled
Turning it off skips the sign-in log queries, so runs are faster and cheaper, but sign-in counts, apps and locations stay empty. Last sign-in date still comes from Entra.
Risk and how to reverse it
Sign-in counts, apps and locations stay empty: findings that depend on sign-in activity lose that context. Reversible: the next run collects it again.
Requires
Nothing else.
Recommended
On.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack