answered 2023-06-12 19:13:01 +0000
The Windows server's Event viewer highlighted that the ADFS login was classified as 'Microsoft Windows security auditing'.