In Dynamics 365, login failure data isn't directly available in the CRM audit logs since they primarily track successful sign-ins and activity within the application. However, you can try the following methods to gather login failure details across your system:
1. Azure AD Sign-In Logs:
Since Dynamics 365 leverages Azure Active Directory (AAD) for authentication, failed login attempts are typically captured in Azure AD sign-in logs.
You can view these logs by navigating to the Azure portal > Azure Active Directory > Sign-ins.
Filter by “Status” to locate failures and narrow down specific details such as IP addresses, users, and failure reasons.
2. Azure Monitor (Log Analytics):
If you need detailed monitoring, consider setting up Azure Monitor with Log Analytics.
With Log Analytics, you can query Azure AD sign-in logs and create custom dashboards or alerts for login failures.
Use queries like SigninLogs | where ResultType != 0 to view only failed sign-in attempts.
