> but where in the auth process should I write the sucessful login IP in the database ? Off the top of my head: How about a Post Authentication hook [1]? [1] https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631868/ProfileHandling