<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
On 7/10/2018 2:24 PM, Cantor, Scott wrote:<br>
<blockquote type="cite"
cite="mid:BYAPR01MB3702026C924B8BAA8D3D1A24D05B0@BYAPR01MB3702.prod.exchangelabs.com">
<blockquote type="cite" style="color: #000066;">
<pre wrap="">Can the audit log be configured to capture both successful and fail
authentications?
</pre>
</blockquote>
<pre wrap="">It logs neither, auditing records the results of completing profile requests. Authentication is not represented formally there, only completed requests. If a profile request completing successfully implies something about authentication, current or otherwise, that's as close as it gets.
</pre>
</blockquote>
<br>
If you are using LDAP authentication, you can get ldaptive to at
least log some of this to the idp-process.log (or elsewhere with
sufficient logback wizardry). Easiest way is to set the ldap
loglevel variable at the top of logback.xml to INFO or higher:<br>
<br>
<variable name="idp.loglevel.ldap" value="INFO" /><br>
<br>
You'll get more than just the success and failure, and the logs will
reflect the LDAP DN rather than the entered username.<br>
<br>
It's possible other authn methods have similar logging that could be
enabled.<br>
<pre class="moz-signature" cols="72">--
%% Christopher A. Bongaarts %% <a class="moz-txt-link-abbreviated" href="mailto:cab@umn.edu">cab@umn.edu</a> %%
%% OIT - Identity Management %% <a class="moz-txt-link-freetext" href="http://umn.edu/~cab">http://umn.edu/~cab</a> %%
%% University of Minnesota %% +1 (612) 625-1809 %%
</pre>
</body>
</html>