Auditing Federation

These topics describe auditing for Federation. With the Federation activation level, you can configure and manage audit events for federated access.

Federation auditing events
This section lists the audit elements that are available for each audit event type.
IBM_SECURITY_AUTHN_events
This event type is generated by the authentication service when it authenticates a user accessing a protected resource.
IBM_SECURITY_AUTHN_TERMINATE event
This audit event is generated when a user is logged off.
IBM_SECURITY_ENCRYPTION events
This event is generated whenever data is encrypted.
IBM_SECURITY_FEDERATION events
This event type is generated when a federation event occurs.
IBM_SECURITY_MGMT_AUDIT events
This event type provides information about changes to the auditing settings; for example, if auditing is enabled or disabled or if auditing is set for specific transactions.
IBM_SECURITY_MGMT_POLICY events
This event type is generated by federation runtime management calls.
IBM_SECURITY_RUNTIME events (Runtime start)
This event type is generated when the runtime is started.
IBM_SECURITY_RUNTIME events (SAML2 message transmission)
This event type is generated when transmitting SAML2 authentication request and response messages.
IBM_SECURITY_TRUST events
This event type is generated by the trust server when it validates a token, issues a token, maps an identity, or authorizes a Web service call.
Deploying pending changes
Some configuration and administration changes require an extra deployment step.

Parent topic: Auditing