Answer
If sign-in is federated through an external identity provider, that provider's own sign-in logs (for example, Azure AD's sign-in activity, which needs a premium license tier to retain history) are typically a more complete and reliable source for last-login information than anything tracked inside IFS Cloud.