Policy that triggers when someone tries to login from outside the United States and triggers on successful login from users that are not in the Office 365 Active Directory.
Data is being reported acurately from the Office 365 API
Office 365's Audit log shows a "LogonError: "UserAccountNotFound" but the ResultStatus = Succeeded
The data that is being reported is being reported from the Office 365 APIs. To see this data do the following.