If the device is purely Azure AD joined, check Entra ID, not on-premises AD. Secure Handling of Recovery Keys
: Right-click the computer and select Properties . get bitlocker recovery key from active directory
If you do not know which computer the user is attempting to access, you can search the entire directory using the first 8 characters of the Recovery Key ID: If the device is purely Azure AD joined,
: Click on the search icon or the local domain on the left. check Entra ID