Authentication failures
The reason for authentication
failure is included in two different
locations in the authentication audit event:
- The
dataelement - The
outcomeelement
Primarily,
the data element is for compatibility
with the earlier version of audit events. Later versions of audit
events use the outcome element.