Lets break this string of text down into it component parts:
URN = User Reference Number – Is the field that contains the unique identifier for each user
SPO = SharePoint Online – This is the service that was in use and while it specifically relates to SharePoint it could mean relate to OneDrive because OneDrive is built on SharePoint
ANON# = Anonymous – This is the unique reference number that Microsoft essentially randomly assigned to a user that did not sign in
So you’ve probably figured out by now that this string is trying to tell you that someone did something in SharePoint or OneDrive that was not logged in.
In our clients case that is exactly what happened. This URN string was in reference to a file that had been downloaded from OneDrive using a SharePoint URL.
How To Share OneDrive Files Folders Anonymously To Anyone With a Link
If your next question is ‘How could someone download a file anonymously from Onedrive or Sharepoint?’, it’s pretty straightforward to answer: