Have you been looking Azure AD Identity Protection lately? It’s identity protection mechanism at cloud and supports cloud based and federated identities. Support for federated identities protection were added couple of weeks ago at least tenant located at US datacenters.
Here is great guidance how to pull data via Graph API from AAD Identity Protection.
After you have add the application and make necessary changes to your script (add client ID and secret) result look like this