Select the User events tab to display the following details for each user event.

​Time

The timestamp when the event occurred.

User ID

The PKI Hub internal identifier of the user associated with the event.

Event saved type

The type of saved event. See the table below for examples.

Each event is prefixed with (tick)  on success and (error)  on error.

Event Type

Description

CLIENT_LOGIN_ERROR

Client login failed

CLIENT_LOGIN

Service account (client credentials) login

CODE_TO_TOKEN_ERROR

Code-to-token exchange failed

CODE_TO_TOKEN

Authorization code exchanged for token

EXECUTE_ACTION_TOKEN_ERROR

Action token execution failed

EXECUTE_ACTION_TOKEN

Action token executed

EXECUTE_ACTIONS_ERROR

Required actions delivery failed

EXECUTE_ACTIONS

Required actions sent to user

LOGIN_ERROR

Login attempt failed

LOGIN

User successfully logged in

LOGOUT_ERROR

Logout failed

LOGOUT

User logged out

REMOVE_CREDENTIAL_ERROR

Credential removal failed

REMOVE_CREDENTIAL

Credential removed

RESTART_AUTHENTICATION_ERROR

Authentication restart failed

RESTART_AUTHENTICATION

Authentication flow restarted

UPDATE_CREDENTIAL_ERROR

Credential update failed

UPDATE_CREDENTIAL

Generic credential updated

UPDATE_PASSWORD_ERROR

Password change failed

UPDATE_PASSWORD

User changed their password

UPDATE_PROFILE_ERROR

Profile update failed

UPDATE_PROFILE

User profile updated

USER_DISABLED_BY_PERMANENT_LOCKOUT

User permanently locked out (brute force)

USER_DISABLED_BY_TEMPORARY_LOCKOUT

User temporarily locked out (brute force)

IDENTITY_PROVIDER_FIRST_LOGIN_ERROR

First IdP login failed

IDENTITY_PROVIDER_FIRST_LOGIN

First login via external IdP (triggers account creation/linking)

IDENTITY_PROVIDER_LINK_ACCOUNT_ERROR

Account linking failed

IDENTITY_PROVIDER_LINK_ACCOUNT

Local account linked to IdP identity

IDENTITY_PROVIDER_LOGIN_ERROR

IdP login failed

IDENTITY_PROVIDER_LOGIN

Login via external IdP initiated

IDENTITY_PROVIDER_POST_LOGIN_ERROR

Post-login processing failed

IDENTITY_PROVIDER_POST_LOGIN

Post-login processing after IdP auth

REMOVE_FEDERATED_IDENTITY_ERROR

Federated identity removal failed

REMOVE_FEDERATED_IDENTITY

Federated identity link removed

IP address

The IP address from which the event originated.

Client 

The client application involved in the event.