> We are trying to get below information, Which log can help to do and what > configuration will be required. Most of it is in the audit log. Authentication outcomes are open ended and are not exposed anywhere except the process/trace log, but should be there on INFO. -- Scott