Authentication Dashboard

The Authentication Dashboard provides a comprehensive view of authentication activities, facilitating the monitoring and analysis of authentication patterns, including the number of successful and failed authentication counts, to ensure efficient access control within Cloud Access Service (CAS).

Access the Authentication Dashboard

Use the Authentication Dashboard to view authentication information for all users in your organization or for individual users within a specified timeframe.

Procedure 

1. Sign in to the Cloud Administration Console.

2. In the Cloud Administration Console, click Dashboards > Authentication.

The dashboard includes the following sections:

Total Number of Authentications

This section provides a comprehensive count of all authentication events within CAS over specified time periods. You can monitor the daily count of successful and failed authentication attempts.

Authentications per Day

This section provides a comprehensive overview of authentication activity for the past 7, 14, and 21 days, as well as the past month. It displays the daily count of both successful and failed authentication attempts, enabling you to track usage trends and detect any significant changes over the specified period.

By default, the bar chart displays authentication activity collected over the past 7 days for all users in your organization who have authenticated through CAS. To access more detailed information, select a specific day to view the breakdown of authentication activity per hour in the subsequent graph.

To retrieve and track user event logs from CAS, refer to the Cloud Administration User Event Log API

Successful and Failed Authentications

The following table lists the events tracked for successful authentications.

The following table lists the events tracked for failed authentications.

Authentications per Hour

This section allows you to explore detailed authentication activity breakdowns by hour. You can select specific data points to visualize the hourly distribution of authentication events. This detailed view helps identify peak activity periods and understand patterns of success or failure rates within daily operations.

Authentications per User

This table summarizes authentication activities for each user, displaying their user ID along with counts of successful and failed authentication attempts. You can select a user's row to view detailed data on the applications accessed and the authenticators used by that user. When a user is selected in the "Authentications per User" section, all authentication events linked to that user are simultaneously displayed in the "Authentications per App" and "Authentications per Authenticator" sections. This integration enables you to gain a comprehensive understanding of the applications accessed and the authenticators utilized by the selected user.

The value UNKNOWN in the graph signifies that the authentication event did not include details about the user attempting to authenticate. This can occur when the authentication process fails before the user was evaluated.

Authentications per Application

This section visualizes how authentication events are distributed across applications or resources associated with the selected user. This graph highlights which applications the user has accessed and displays the number of successful and failed authentication attempts for each application over a specified period.

The value OTHER in the graph signifies that the application and authenticator were unavailable for that event. This can occur in several scenarios, such as:

• The user was not authenticating to an application, but rather an MFA API call was made to evaluate credentials or a policy.

• The authentication failed before the product could begin evaluating the target application.

Authentications per Authenticator

This section displays the distribution of authentication events across different authenticators used by the selected user. The graph provides insights into the specific authenticators used by the user and shows the counts of successful and failed authentication attempts associated with each authenticator over a specified period.

The value OTHER in the graph signifies that the application and authenticator were unavailable for that event. This can occur in several scenarios, such as:

• The user was not authenticating to an application, but rather an MFA API call was made to evaluate credentials or a policy.

• The authentication failed before the product could begin evaluating the target application.

• The authentication failed before the product could start assessing the user's credentials.