Use case: Authentication events of security keys

Requirements for viewing:

• The "Monitoring of authentication events" option is enabled.
• Your assigned role has the necessary permissions to view authentication events.
• Once data is collected, you can analyze it in the journal.

Here's how to analyze the events

1. In the main navigation of the Appterix Management UI, switch to Authentication Insights > Journal.
2. Use the date filter to narrow down the events to a specific time period.
3. Based on the filter, a table with the relevant activities is displayed.

The table contains the following detailed information for the analysis:

• Device: The security key used (e.g. YubiKey, iShield Key or Nitrokey).
• Serial number: The unique serial number of the respective key.
• Relying Party ID: The service that requested authentication.
• Authentication status: The result of the authentication attempt.
• Authentication method: The method used for the process.
• Application name: The application through which the authentication was performed.
• Application path: The full path of the application used.
• Benutzer: The user account that performed the authentication.
• End device: The device that initiated the process.
• Date and Time: The exact time of the event.