Alerts for Microsoft 365 sign-ins from another country
Octotor watches the sign-ins to your users' Microsoft 365 accounts. When someone signs in from a country you did not allow, or keeps entering a wrong password, Octotor alerts you.
Watch it
How to connect Microsoft 365 to Octotor, step by step, and set up the sign-in alerts.
Jump to a part: What Microsoft 365 adds (0:13) · Read-only access in Entra (0:33) · Add the connector (0:47) · Test and schedule the sync (1:11) · Approve accounts in Discovery (1:32) · Linked accounts (1:55) · What Microsoft 365 knows (2:12) · Sign-ins are watched (2:27) · Sign-in rules (2:52) · The alert (3:11) · Ask AI in plain words (3:25) · Everything on one page (3:39)
The short version: the alert, where you see it, and failed sign-ins.
How it works
You set the countries your users work from. If someone signs in from another country, Octotor sends an alert.
Octotor also alerts you when there are many failed sign-ins in a short time, for example five in ten minutes.
Where you see the alert
The alert goes out by email, Telegram or webhook. It also stays in the Alert Center until someone handles it. There you see where the sign-in came from, the IP address and the app.
On the Dashboard, the Microsoft 365 tile turns yellow and lists the alert.
What you need
Octotor connects to Microsoft 365 with read-only access. It never changes anything in your tenant. The Help section explains the setup step by step.
Sign-in alerts need Entra ID P1, or a license that includes it, such as Microsoft 365 Business Premium.
What else you see
Once Microsoft 365 is connected, each user in Octotor also shows their license, groups, roles, mailbox size, mail forwarding rules and whether MFA is on, next to their Active Directory account.
Try it yourself
Try it in the live demo. No account needed.