Admin activity management event detail

The document defines the different types of identity, source, event details, and modifications that are recorded against different resource types during an admin activity.

The following table lists a sample of the admin activity events and the details that they provide.

Table 1. Admin activity management events
Resource type Identity Source Event details Modifications
Access policy
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Policy name
  • Policy ID
  • Administration console access
  • Home page access
  • policy
Alias
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Result
  • Event type detail
  • Alias
This information is masked for privacy concerns.
  • UUID
  • spProvidedID
API client
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • API client
  • Client ID
  • Enabled
  • override_settings
  • name
Application
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Application name
  • Application type
  • Application ID
  • Application URL
  • Name ID Format
  • Validate SAML request signature
  • Assertion Consumer Service URL (HTTP-Post)
  • Encryption assertion
  • Provider ID
  • Name Identifier
  • Sign authentication response
  • Send all known user attributes in the SAML assertion
  • Signature Algorithm
  • uniqueID
Application consent
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Application name
  • User
Attribute
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Attribute name
  • Attribute type
  • Attribute ID
  • Attribute name
  • Description
  • Identity source credential
  • Data type
  • Default value
Certificate
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Certificate name
  • Certificate type
  • Issuer DN
  • Subject DN
  • Serial number
  • Valid from
  • Expires on
  • Default certificate
Consent provider
  • User name
  • Realm
  • Type
  • Client IP
  • Location
  • Event type
  • Event type detail
  • Consent provider name
Content security policy
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Content security policy header
Device certificate
  • User name
  • Realm
  • Type
  • Client IP
  • Location
  • Event type
  • Event type detail
  • API grant type
  • Target
Device manager
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Attribute name
  • Attribute type
  • Attribute id
  • Maximum number of client certificates
  • Cache timeout of user and device information
Domain
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Domains
Entitlement
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Application name
  • Application type
  • Application ID
  • User/group
  • Grant type
EULA
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • EULA ID
  • EULA name
  • Access types
  • Attributes
  • Custom attributes
  • Description
  • Default consent duration
  • EULA name
  • EULA version
  • State
  • Tags
  • Terms of use URI
FIDO2 device metadata
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
FIDO2 relying parties
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
Flow
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Flow name
  • Flow reference
  • Trace URL validity
Group
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Group
  • Users
  • Name
Identity feed
  • API client name
  • Client ID
  • Type
  • Client IP
  • Location
  • Event type
  • Event type detail
  • Identity feed instance name
  • Description
  • Identity feed instance ID
  • Template ID
  • Enabled
  • In draft
  • Send notification
  • Continuous sync
  • Matching attribute updated
  • Authentication details updated
  • Custom attribute updated
  • Attribute mapping updated
Notification configuration
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • SMS sender identifier
  • Email sender address
  • Email sender name
  • notificationsSMS
  • notificationEmail
Password policy
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Password policy name
  • Send expiration warning
  • Passwords in history
  • Lock out
  • Lockout duration
  • Maximum age
  • Maximum failed attempts
  • Minimum age
  • Minimum number of alphabetic characters
  • Minimum length
  • Minimum number of other characters
Password vault
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • User name
Resources
Privacy policy
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Policy ID
  • Policy version
  • Policy version
  • Rule list
Privacy rule
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Rule name
  • Rule ID
  • Description
  • Activation date
  • Expiration date
  • Consent type
  • Tags
  • Conditions
  • Decision
  • Rule name
  • Disclose purpose to user
Purpose
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Purpose ID
  • Purpose name
  • Access types
  • Attributes
  • Custom attributes
  • Description
  • Default consent duration
  • Previous consents apply
  • Purpose name
  • Purpose version
  • State
  • Tags
Theme
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Theme name
  • Theme ID
  • Theme name
  • Theme description
  • File reset
  • File modified
Token
  • User name
  • Realm
  • Type
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • Resource name
  • User
  • User name Token revoked
  • Token reactivated
  • Token deleted
User
  • User name
  • Realm
  • Type
  • Component
  • Client IP
  • Device type
  • Location
  • Event type
  • Event type detail
  • User
  • User name
  • Surname
  • Given name
  • Full name
  • Mobile number
  • Email
  • Two-factor authentication required
  • User expiration