Glossary: Logs and Data Sources for Investigations

Identity provider

The cloud service that runs single sign-on and MFA. It logs each sign-in and each MFA prompt.