Token Server audit events

Event Description
CONSENT_GIVEN User has given consent for a set of scopes for a client.
CONSENT_​CSRF_​INVALID The CSRF token provided while submitting a consent is invalid. A CSRF token is only valid for a limited amount of time. All details in the request should match the values expected for this particular CSRF token.
API_​AUTHENTICATION_​FAILED Invalid username and password provided while accessing the end user API.
API_CONSENT_LISTED A list of consents was returned for a user via the end user API.
API_​CONSENT_​NO_​DATA_​FOUND No consents could be found for a user via the end user API.
API_CONSENT_REMOVED Consent for a client (all scopes) is removed for a user via the end user API.
API_​CONSENT_​NOT_​REMOVED_​NOT_​FOUND Unable to remove consent via the end user API because no corresponding consent could be found.
API_​CONSENT_​NOT_​REMOVED_​FORBIDDEN Unable to remove a consent via the end user API because the consent requested for removal does not belong to the specified user.
API_TOKENS_LISTED A list of access tokens was returned for a user via the end user API.
API_​TOKENS_​NO_​DATA_​FOUND No access tokens could be found for a user via the end user API.
API_TOKEN_REMOVED Access token for a client is removed for a user via the end user API.
API_​TOKEN_​NOT_​REMOVED_​NOT_​FOUND Unable to remove an access token via the end user API because no corresponding access token could be found.
API_​TOKEN_​NOT_​REMOVED_​FORBIDDEN Unable to remove a token via the end user API because the token requested for removal does not belong to the specified user.
API_​NOTIFICATION_​SETTING_​NOT_​FOUND No corresponding user is found for the requested notification setting via the end user API.
API_​NOTIFICATION_​SETTING_​FOUND Notification setting is found or the user does exist and uses the default notification setting. This value is returned for the user via the end user API.
API_​NOTIFICATION_​SETTING_​REMOVED Notification setting removed for a user via the end user API.
API_​NOTIFICATION_​SETTING_​SET Notification setting set for a user via the end user API.
API_​NOTIFICATION_​SETTING_​SET_​FAILED Unable to set notification setting for a user via the end user API. Only values SMS and EMAIL are allowed.
API_DEVICES_LISTED A list of devices was returned for a user via the end user API.
API_​DEVICES_​NO_​DATA_​FOUND No devices could be found for a user via the end user API.
API_DEVICE_REMOVED Device for a user is removed via the end user API.
API_​DEVICE_​REMOVED_​FOR_​ONE_​PROFILE Device data related to one user profile was removed via the end user API.
API_​DEVICE_​NOT_​REMOVED_​FORBIDDEN Unable to remove a device via the end user API because the device requested for removal does not belong to the specified user.
API_​FINGER_​PRINT_​NOT_​DISABLED_​CLIENT_​NOT_​FOUND Unable to disable finger print via the end user API because no corresponding device could be found.
API_​FINGER_​PRINT_​NOT_​DISABLED_​FORBIDDEN Unable to disable finger print via the end user API because no the device requested does not belong to the specified user.
API_​FINGER_​PRINT_​DISABLED Finger print was disabled for the specified user and device.
API_APP_LISTED A list of applications was returned for a user via the end user API
API_​APP_​NO_​DATA_​FOUND No applications could be found for a user via the end user API
API_APP_REMOVED Access to an application for a user is removed via the end user API
API_​AUTHENTICATION_​APPS_​LISTED A list of authentication app instances was returned for a user via the end user API.
API_​AUTHENTICATION_​APP_​NOT_​FOUND No authentication app instances could be found for a user via the end user API.
API_​AUTHENTICATION_​APP_​REMOVED The authentication capabilities for an app were removed for a user via the end user API.
API_​AUTHENTICATION_​APP_​NOT_​REMOVED_​NOT_​FOUND The authentication capabilities for an app could not be removed because app instance could not be found via the end user API.
API_​AUTHENTICATION_​APP_​NOT_​REMOVED_​FORBIDDEN The authentication capabilities for an app could not be removed because app instance belongs to other user via the end user API.
API_​PAYLOAD_​ENCRYPTION_​APPLICATION_​DISABLED Mobile platform version is disabled.
API_​PAYLOAD_​ENCRYPTION_​POLICY_​NOT_​FOUND No payload encryption policy could be found via the the API endpoint.
API_​PAYLOAD_​ENCRYPTION_​INVALID_​PARAMETERS Invalid parameters were forwarded to the API endpoint.
API_​PAYLOAD_​ENCRYPTION_​POLICY_​FOUND A payload encryption policy was returned for a Security Proxy via the API endpoint.
API_​PAYLOAD_​ENCRYPTION_​INVALID_​ACCESS_​TOKEN Access token could not be found or was invalid.
API_​VERSION_​NOT_​ALLOWED The used endpoint is not allowed for the api version used by the client.
EXTERNAL_​SCOPE_​CHECK_​FAILED An error occurred while performing the external scope check via the scope service endpoint.
EXTERNAL_​NOTIFICATION_​FAILED An error occurred while sending a notification to the user via the external notification service.
ADMIN_​AUTHENTICATION_​FAILURE User has entered an incorrect username and/or password to log in into the admin console.
ADMIN_​AUTHENTICATION_​SUCCESS User has successfully logged into the admin console. The details provide information about the roles that the user has in the admin console. No roles means that he does not have any permissions.
ADMIN_​CLIENT_​DELETED An oauth client has been deleted via the admin console.
ADMIN_​CLIENT_​UPDATED An oauth client has been updated via the admin console.
ADMIN_​STATIC_​CLIENT_​CREATED A static oauth client has been created via the admin console.
ADMIN_​API_​CLIENT_​CREATED An oauth client for API calls has been created via the admin console.
ADMIN_SCOPE_DELETED An oauth scope has been deleted via the admin console.
ADMIN_SCOPE_CREATED An oauth scope has been created via the admin console.
ADMIN_SCOPE_UPDATED An oauth scope has been updated via the admin console.
ADMIN_​MOBILE_​APP_​CREATED A mobile application has been created via the admin console.
ADMIN_​MOBILE_​APP_​DELETED A mobile application has been deleted via the admin console.
ADMIN_​MOBILE_​APP_​UPDATED A mobile application has been updated via the admin console.
ADMIN_​MOBILE_​PLATFORM_​CREATED A mobile platform has been created via the admin console.
ADMIN_​MOBILE_​PLATFORM_​DELETED A mobile platform has been deleted via the admin console.
ADMIN_​MOBILE_​PLATFORM_​UPDATED A mobile platform has been updated via the admin console.
ADMIN_​MOBILE_​CONFIG_​UPDATED The configuration for mobile authentication has been changed in the admin console.
ADMIN_​CORS_​CONFIG_​UPDATED The configuration for CORS has been changed in the admin console.
ADMIN_​MOBILE_​PLATFORM_​VERSION_​CREATED A platform version has been created for a mobile application via the admin console.
ADMIN_​MOBILE_​PLATFORM_​VERSION_​UPDATED A platform version has been updated for a mobile application via the admin console.
ADMIN_​MOBILE_​PLATFORM_​VERSION_​DELETED A platform version has been deleted for a mobile application via the admin console.
ADMIN_​AUTH_​PROPERTIES_​SET_​CREATED Mobile authentication type has been created via the admin console.
ADMIN_​AUTH_​PROPERTIES_​SET_​UPDATED Mobile authentication type has been updated via the admin console.
ADMIN_​AUTH_​PROPERTIES_​SET_​DELETED Mobile authentication type has been deleted via the admin console.
ADMIN_​CALLBACK_​CONFIG_​CREATED Callback configuration has been created via the admin console.
ADMIN_​CALLBACK_​CONFIG_​UPDATED Callback configuration has been updated via the admin console.
ADMIN_​CALLBACK_​CONFIG_​DELETED Callback configuration has been deleted via the admin console.
ADMIN_​PUSH_​MESSAGING_​CONFIG_​CREATED Push messaging configuration has been created via the admin console.
ADMIN_​PUSH_​MESSAGING_​CONFIG_​UPDATED Push messaging configuration has been updated via the admin console.
ADMIN_​PUSH_​MESSAGING_​CONFIG_​DELETED Push messaging configuration has been deleted via the admin console.
ADMIN_​IDENTITY_​PROVIDER_​CREATED An identity provider has been created via the admin console.
ADMIN_​IDENTITY_​PROVIDER_​DELETED An identity provider has been deleted via the admin console.
ADMIN_​IDENTITY_​PROVIDER_​UPDATED An identity provider has been updated via the admin console.
ADMIN_​IDENTITY_​PROVIDER_​ATTRIBUTE_​MAPPING_​CREATED An attribute mapping has been created for an identity provider via the admin console.
ADMIN_​IDENTITY_​PROVIDER_​ATTRIBUTE_​MAPPING_​DELETED An attribute mapping has been deleted for an identity provider via the admin console.
ADMIN_​IDENTITY_​PROVIDER_​ATTRIBUTE_​MAPPING_​UPDATED An attribute mapping has been updated for an identity provider via the admin console.
ADMIN_​PIN_​POLICY_​CREATED A pin policy has been created via the admin console.
ADMIN_​PIN_​POLICY_​UPDATED A pin policy has been updated via the admin console.
ADMIN_​MESSAGE_​CREATED A translation has been created via the admin console.
ADMIN_​MESSAGE_​DELETED A translation has been deleted via the admin console.
ADMIN_​MESSAGE_​UPDATED A translation has been updated via the admin console.
ADMIN_USER_REVOKED Revoke user from a device via the admin console.
ADMIN_APPLICATION_INSTANCE_REVOKED Revoke mobile authentication for a user via the admin console.
ADMIN_APPLICATION_INSTANCE_NOT​_REVOKED_NOT_FOUND Attempt to revoke mobile authentication for a user via the admin console, but no mobile authentication was found.
ADMIN_APPLICATION_INSTANCE_NOT​_REVOKED_INCORRECT_DEVICE Attempt to revoke mobile authentication for a user via the admin console, but the device does not match.
ADMIN_​TEMPLATES_​TEMPLATE_​SETS_​CREATED A template set has been added via the admin console.
ADMIN_​TEMPLATES_​TEMPLATE_​SETS_​UPDATED A template set has been modified via the admin console.
ADMIN_​TEMPLATES_​TEMPLATE_​SETS_​DELETED A template set has been removed via the admin console.
ADMIN_​FIDO_​CONFIG_​UPDATED The FIDO configuration has been modified via the admin console.
ADMIN_​FIDO_​POLICY_​MAPPING_​CREATED A FIDO Policy mapping has been added via the admin console.
ADMIN_​FIDO_​POLICY_​MAPPING_​UPDATED A FIDO Policy mapping has been modified via the admin console.
ADMIN_​FIDO_​POLICY_​MAPPING_​DELETED A FIDO Policy mapping has been removed via the admin console.
HELPDESK_​CLIENT_​DELETE_​UNAUTHORIZED Attempt to delete a dynamic client via the admin console, but this operation is not permitted for the admin user.
HELPDESK_​APPLICATION_​INSTANCE_​NOT_​REVOKED_​FORBIDDEN Attempt to revoke mobile authentication for a user via the admin console, but this operation is not permitted for the admin user.
HELPDESK_​APPLICATION_​INSTANCE_​REVOKE_​UNAUTHORIZED Attempt to revoke mobile authentication for a user via the admin console, but this operation is not permitted for the admin user.
CLIENT_​CREDENTIALS_​CHECK_​SUCCESS Successfully verified the client credentials
CLIENT_​CREDENTIALS_​CHECK_​SKIPPED The client credentials are not validated because the application is running in development mode.
CLIENT_​CREDENTIALS_​CHECK_​FAILED Could not verify the client credentials
CLIENT_​VALIDATION_​INVALID_​HEADER Client validation failed because one or more required headers is missing or no mobile application can be found based on the header values.
CLIENT_​VALIDATION_​VERSION_​DISABLED Client validation failed because the version has been disabled
CLIENT_​VALIDATION_​UPGRADE_​INITIALIZED Client validation resulted in the initialization of Dynamic Client Upgrade.
CLIENT_​VALIDATION_​DEBUGGER_​DETECTED Client validation failed because debugger was detected
CLIENT_​VALIDATION_​JAILBREAK_​DETECTED Client validation failed because jailbreak was detected
CLIENT_​VALIDATION_​ABUSE_​DETECTED Client validation failed because abuse was detected. Verify the application signature.
CLIENT_​VALIDATION_​OS_​VERSION_​INVALID Client validation failed because client's OS version is not supported or blacklisted.
DYNAMIC_​REG_​INVALID_​HEADER Unable to perform dynamic client registration because one or more required headers is missing or no mobile application can be found based on the header values.
DYNAMIC_​REG_​INVALID_​REQUEST Unable to perform dynamic client registration because identifier or challenge response is not available in request.
DYNAMIC_REG_SUCCESS New client was registered via dynamic client registration.
DYNAMIC_REG_FAILED Dynamic client registration failed due to invalid challenge response.
DYNAMIC_​REG_​NEW_​REGISTRATIONS_​DISABLED Dynamic client registration failed because new registrations are disabled
DYNAMIC_​REG_​VERSION_​DISABLED Dynamic client registration failed because the version is disabled
DYNAMIC_​REG_​OS_​VERSION_​INVALID Dynamic client registration failed because client's OS version is not supported or blacklisted.
DYNAMIC_UP_SUCCESS Dynamic client upgrade was successfully executed, the application version associated with the dynamic client was updated.
DYNAMIC_UP_FAILED Dynamic client upgrade failed
AUTHORIZATION_​LVL_​UNSUPPORTED The authentication level specified in the authentication level header of the incoming request can not be parsed to a valid integer value.
AUTHORIZATION_​FAILED_​UNABLE_​TO_​GENERATE_​ID_​TOKEN Error occured during id_token generation process, check OpenId Connect signing/encryption properties.
AUTHZ_​REQUEST_​AUTHENTICATION_​LVL_​INSUFFICIENT The authentication level specified in the authentication level header of the incoming request is lower then the required authentication level by one or more of the requested scopes.
AUTHZ_​REQUEST_​INVALID The Oauth authorization request is missing one or more required fields.
AUTHZ_​REQUEST_​REDIRECT_​URI_​INVALID The provided redirect uri does not match the configured redirect uri for the specified client.
AUTHZ_​REQUEST_​SCOPE_​INVALID One or more of the requested scopes is not available for the specified client.
AUTHZ_​REQUEST_​NOT_​AUTHORIZED_​FOR_​SCOPE The user does not have a product for the requested scope.
AUTHZ_​REQUEST_​GRANT_​CREATED An authorization code is created for the requested client and scopes.
AUTHZ_​REQUEST_​TOKEN_​CREATED An access token is created for the requested client and scopes via the implicit flow.
AUTHZ_​REQUEST_​INVALID_​RESPONSE_​TYPE The response type used does not match a grant type selected for the client. Or the response type is not a valid grant type supported by the application.
TOKEN_​REQUEST_​INVALID The access token request is missing one or more required fields.
TOKEN_​REQUEST_​INVALID_​GRANT The access grant used to request an access token was expired or revoked.
TOKEN_​REQUEST_​SCOPE_​INVALID One or more of the requested scopes is not available for the specified client.
TOKEN_​REQUEST_​NOT_​AUTHORIZED_​FOR_​SCOPE The user does not have a product for the requested scope.
TOKEN_​REQUEST_​INVALID_​CLIENT_​CREDENTIALS Provided client id and client secret do not match.
TOKEN_​REQUEST_​INVALID_​REFRESH_​TOKEN No access token could be found based on the provided refresh token.
TOKEN_​REQUEST_​INVALID_​BEARER_​TOKEN No access token could be found based on the provided bearer token.
TOKEN_​REQUEST_​DISABLED_​GRANT_​TYPE The required grant type is not enabled for the client.
TOKEN_​REQUEST_​UNSUPPORTED_​GRANT_​TYPE Grant type used is not recognized and supported by the application.
TOKEN_​REQUEST_​INVALID_​CLIENT No client could be found based on the specified client_id.
TOKEN_​REQUEST_​ACCESS_​TOKEN_​CREATED Access token created via provided authorization code.
TOKEN_​REQUEST_​ACCESS_​TOKEN_​REFRESHED A new access token is created based on the provided refresh token.
TOKEN_​REQUEST_​INVALID_​ACCESS_​TOKEN The access token used is expired or revoked.
TOKEN_​REQUEST_​ACCESS_​TOKEN_​VALIDATED The access token used was successfully validated.
TOKEN_​REQUEST_​FINGER_​PRINT_​INVALID_​CLIENT_​CREDENTIALS The client credentials used to fetch a finger print refresh token were invalid.
TOKEN_​REQUEST_​FINGER_​PRINT_​INVALID_​REFRESH_​TOKEN The refresh token used to fetch a finger print refresh token was invalid.
TOKEN_​REQUEST_​FINGER_​PRINT_​TOKEN_​CREATED A refresh token for finger print usage was created and the original refresh token was refreshed.
TOKEN_​REQUEST_​FINGER_​PRINT_​ACCESS_​TOKEN_​REFRESHED The finger print refresh token was refreshed
TOKEN_REQUEST_FINGER_PRINT_ ​REFRESH_TOKEN_RETRY_COUNT_EXCEEDED The finger print refresh token used was wrong, therefore all finger print refresh tokens for this client are removed
TOKEN_​REQUEST_​INVALID_​PROFILE_​ID Provided profile id has invalid format or is already used by other user of the client.
TOKEN_​REVOKE_​ACCESS_​TOKEN_​SUCCESS The access token was successfully revoked, corresponding refresh token when available is not revoked.
TOKEN_​REVOKE_​ACCESS_​TOKEN_​INVALID The access token could not be revoked.
TOKEN_​REVOKE_​REFRESH_​TOKEN_​SUCCESS The refresh token was successfully revoked including the access tokens based on this refresh token.
TOKEN_​REVOKE_​REFRESH_​TOKEN_​INVALID The refresh token could not be revoked.
TOKEN_​REQUEST_​REFRESH_​TOKEN_​RETRY_​COUNT_​EXCEEDED The refresh token has been used wrongly for more than the maximum allowed retries. The refresh token is invalidated.
TOKEN_​REVOKE_​CLIENT_​INVALID The token could not be revoked because the client is not found or the client credentials are invalid.
TOKEN_​REVOKE_​TOKEN_​INVALID The token could not be revoked because it is not found. There was no token type hint specified in the request.
TOKEN_​REVOKE_​CLIENT_​TOKENS_​SUCCESS All tokens available for a client were removed via the client tokens revocation endpoint.
TOKEN_​REVOKE_​PROFILE_​SUCCESS All tokens available for a profile were removed via the profile revocation endpoint.
TOKEN_​REVOKE_​CLIENT_​FINGER_​PRINT_​TOKENS_​SUCCESS All fingerprint tokens available for a client were removed via the token revocation endpoint.
TOKEN_​REVOKE_​PROFILE_​TOKENS_​SUCCESS All tokens available for a profile on a client were revoked using the profile token revocation endpoint.
TOKEN_​REVOKE_​PROFILE_​FINGER_​PRINT_​TOKENS_​SUCCESS All fingerprint tokens available for a profile on a client were removed using the profile token revocation endpoint.
ENROLLMENT_​FAILURE_​DISABLED Failed to process the enrollment request because enrollment is disabled.
ENROLLMENT_​INITIALIZED Successfully initialized the enrollment process.
ENROLLMENT_​INIT_​FAILURE_​INVALID_​REQ Failed to initialize enrollment because input params were invalid.
ENROLLMENT_​INIT_​FAILURE_​INVALID_​TOKEN Failed to initialize enrollment because the access token was invalid.
ENROLLMENT_​INIT_​FAILURE_​EXISTING_​PUSH_​TOKEN Failed to initialize enrollment because the push token was already in use.
ENROLLMENT_​INIT_​FAILURE_​USER_​ENROLLED Failed to initialize enrollment because there is an existing enrollment for the user.
ENROLLMENT_​INIT_​DROP_​EXISTING_​APP_​INSTANCE Existing app instance was removed during enrollment init because an existing app instance was found for same user id and push token which indicates a reinstall of the app.
ENROLLMENT_​KEY_​FETCHED Successfully fetched the public key for the mobile authentication server.
ENROLLMENT_​KEY_​FAILURE_​INVALID_​ID Failed to generate the public key because the given identifier was not found.
ENROLLMENT_​ACK_​SUCCESS Successfully acknowledged the enrollment.
ENROLLMENT_​KEY_​FAILURE_​INVALID_​REQ Failed to generate the public key because input params were invalid.
ENROLLMENT_​ACK_​FAILURE_​INVALID_​ID Failed to acknowledge the enrollment because the given identifier was not found.
ENROLLMENT_​UPDATE_​SUCCESS Successfully updated the push token.
ENROLLMENT_​UPDATE_​FAILURE_​INVALID_​REQ Failed to update the push token because input params were invalid or the old push token provided did not match the client's current push token.
ENROLLMENT_​UPDATE_​FAILURE_​INVALID_​TOKEN Failed to update the push token because the access token was invalid.
ENROLLMENT_​UPDATE_​FAILURE_​UNSUPPORTED_​PLATFORM Failed to update the push token because the client's platform is not supported by this operation.
ONE_​TIME_​PASSWORD_​AUTH_​SUCCEEDED Successfully authenticated using One Time Password.
ONE_​TIME_​PASSWORD_​AUTH_​FAILED One Time Password authentication failed.
ONE_​TIME_​PASSWORD_​GENERATION_​FAILED_​MISSING_​USER_​ID Failed to generate One Time Password due to a missing user identifier.
API_​ACCESS_​NOT_​ALLOWED_​INVALID_​CREDENTIALS The client credentials provided to access the API were invalid.
API_​ACCESS_​NOT_​ALLOWED_​DISABLED_​GRANT_​TYPE The required grant type to access the API is not enabled for the client.
API_​ACCESS_​NOT_​ALLOWED_​INVALID_​SCOPES The required scope to access the API is not enabled for the client.
API_ACCESS_GRANTED Access to the API was successfully granted.
PUSH_​AUTH_​INITIALIZED Successfully initialized push authentication for a user.
PUSH_​AUTH_​INIT_​FAILURE Failed to initialize authentication, unable to connect with Push Notification Service or push message rejected.
PUSH_​AUTH_​INIT_​FAILURE_​NO_​APP_​INSTANCE Failed to initialize authentication because no authentication app configured for the user.
PUSH_​AUTH_​INIT_​FAILURE_​AUTH_​METHOD_​NOT_​AVAILABLE Failed to initialize authentication because the chosen authentication method is not available for the user.
PUSH_​AUTH_​INIT_​FAILURE_​DISABLED Failed to initialize authentication because push authentication disabled.
PUSH_​AUTH_​INIT_​FAILURE_​INVALID_​REQ Failed to initialize authentication because input params were invalid.
AUTH_​INIT_​FAILURE_​INVALID_​AUTH_​PROPERTIES_​NAME Failed to initialize authentication because the given name of the Mobile authentication type was invalid.
PUSH_​AUTH_​INIT_​FAILURE_​MESSAGE_​TOO_​LONG Failed to initialize authentication because message content was too long.
PUSH_​AUTH_​RESEND_​FAILURE_​RESEND_​LIMIT_​REACHED Failed to resend push message because the resend limit was reached.
PUSH_​AUTH_​RESEND_​FAILURE_​NO_​APP_​INSTANCE Failed to resend push message because no authentication app configured for the user.
PUSH_​AUTH_​RESEND_​FAILURE Failed to resend push message, unable to connect with Push Notification Service or push message rejected.
PUSH_​AUTH_​RESEND_​SUCCESS Successfully resend push message.
PUSH_​AUTH_​AUTHENTICATED Successfully authenticated via push authentication.
PUSH_​AUTH_​NOT_​AUTHENTICATED User rejected authentication via push authentication.
PUSH_​AUTH_​NOT_​AUTHENTICATED_​INVALID_​TRANSACTION Invalid push authentication answer received because of an unknown transaction.
PUSH_​AUTH_​NOT_​AUTHENTICATED_​INVALID_​TOKEN Invalid push authentication answer received because of an invalid authentication token.
PUSH_​AUTH_​NOT_​AUTHENTICATED_​TRANSACTION_​EXPIRED Invalid push authentication answer received because the transaction has expired.
PUSH_​AUTH_​NOT_​AUTHENTICATED_​INVALID_​ENDPOINT_​VERSION Invalid push authentication answer endpoint version was used for authentication transaction.
PUSH_​AUTH_​NOT_​AUTHENTICATED_​FAILED_​TO_​DECRYPT_​MESSAGE Invalid push authentication answer received because it could not be decrypted.
PUSH_​AUTH_​CALLBACK_​SENT The authentication initializer was informed about the authentication result via a callback.
PUSH_​AUTH_​CALLBACK_​FAILED An error occurred while sending a callback to the authentication initializer.
PUSH_​AUTH_​VALIDATION_​PIN_​LIMIT_​EXCEEDED Exceeded allowed push with PIN answer attempts due to invalid PIN, therefore the user is revoked for this application instance.
PUSH_​AUTH_​VALIDATION_​FINGER_​PRINT_​LIMIT_​EXCEEDED The wrong finger print was used via push authentication, therefore fingerprint authentication is revoked for this user.
PUSH_​AUTH_​TRANSACTION_​RETRIEVED Authentication transaction successfully retrieved.
PUSH_​AUTH_​TRANSACTION_​NOT_​RETRIEVED Failed to retrieve authentication transaction, invalid transaction id.
PUSH_​AUTH_​NOT_​AUTHENTICATED_​INVALID_​REFRESH_​TOKEN Failed to answer push message due to invalid refresh token.
SMS_​AUTH_​INIT_​FAILURE_​PHONE_​NUMBER_​INVALID_​OR_​MISSING Failed to initialise SMS authentication, phone number missing or invalid.
SMS_​AUTH_​INIT_​FAILURE_​FAILED_​TO_​SEND_​SMS Failed to initialise SMS authentication - failed to send SMS.
SMS_​AUTH_​NOT_​AUTHENTICATED_​INVALID_​VERIFICATION_​CODE Failed to authenticate via SMS, wrong verification code.
SMS_​AUTH_​INIT_​FAILURE_​DISABLED Failed to initialise sms authentication, functionality disabled.
SMS_​AUTH_​INIT_​MESSAGE_​SENT Sms authentication message has been successfully sent.
PUSH_​AUTH_​FETCH_​SECURED_​MESSAGE_​FETCHED Successfully fetched secured authentication message.
PUSH_​AUTH_​FETCH_​FAILED_​INVALID_​TRANSACTION Failed to fetch secured authentication message due to invalid transaction id.
PUSH_​AUTH_​FETCH_​FAILED_​TRANSACTION_​ALREADY_​FETCHED Failed to fetch secured authentication message due to transaction can be fetched only once.
PUSH_​AUTH_​FETCH_​FAILED_​TRANSACTION_​EXPIRED Failed to fetch secured authentication message due to expired transaction.
SMS_​AUTH_​AUTHENTICATED Successfully authenticated via sms
SMS_​AUTH_​FAILURE_​INVALID_​TRANSACTION Failed to authenticate via SMS, invalid transaction identifier.
SMS_​AUTH_​VALIDATION_​LIMIT_​EXCEEDED Exceeded allowed SMS code verification attempts, transaction revoked.
SMS_RESEND_FAILED Resending of sms failed. The details field contains the cause.
SMS_​RESEND_​SUCCEEDED Resending of sms succeeded.
UNABLE_​TO_​DETERMINE_​IDENTITY_​PROVIDER No identity provider could be selected for the incoming authentication request.
MOBILE_​CLIENT_​UPDATED_​PLATFORM_​VERSION Updated the mobile platform version for a client
SMS_​STEP_​UP_​CSRF_​INVALID The CSRF token provided while submitting a sms code is invalid. A CSRF token is only valid for a limited amount of time. All details in the request should match the values expected for this particular CSRF token.
SMS_​STEP_​UP_​CODE_​INVALID The code submitted during sms step up was invalid.
IDP_​OAUTH_​STATE_​MISMATCH The expected value for the state parameter from the OAuth IdP does not match the stored value, or one of the state values is missing.
IDP_​OAUTH_​MISSING_​ACCESS_​GRANT The OAuth IdP did not return an access grant.
IDP_​OAUTH_​MISSING_​ACCESS_​TOKEN The OAuth IdP did not return an access token.
IDP_​OAUTH_​MISSING_​USER_​INFO The OAuth IdP did not return user information or the response was in an unexpected format.
FIDO_REQUEST Fido UAF request was executed. The details field contains info about execution status, operation type (registration,authentication,deregistration) and FIDO policy id.
FIDO_RESPONSE Fido UAF response was executed. The details field contains info about execution status and operation type (registration,authentication,deregistration).
FIDO_​TRUSTED_​FACETS_​REQUEST Fido Trusted Facets request was executed. The details field contains info about execution status and application id.
FIDO_BAD_REQUEST Fido request or response was attempted, but the request was invalid. The details field contains the body of the request.
FIDO_​CONNECTION_​ERROR Fido request or response was attempted, but Fido server could not be reached.
FIDO_​MISSING_​USERNAME Fido request or response from Fido server does not contain required username parameter.
FIDO_DISABLED Fido authentication feature is disabled.
FIDO_​REGISTRATION_​REQUEST_​SUCCESS Fido registration request was executed with success.
FIDO_​REGISTRATION_​REQUEST_​FAILURE Fido registration request failed.
FIDO_​AUTHENTICATION_​REQUEST_​SUCCESS Fido authentication request was executed with success.
FIDO_​AUTHENTICATION_​REQUEST_​FAILURE Fido authenntication request failed.
FIDO_​DEREGISTRATION_​REQUEST_​SUCCESS Fido deregistration request was executed with success.
FIDO_​DEREGISTRATION_​REQUEST_​FAILURE Fido deregistration request failed.
FIDO_​RESPONSE_​ACCESS_​TOKEN_​NOT_​FOUND Fido response was executed with success, but there was no default Access Token for a user.
FIDO_​AUTHENTICATION_​RESPONSE_​SUCCESS Fido authentication response was executed with success.
FIDO_​AUTHENTICATION_​RESPONSE_​FAILURE Fido authentication response failed.
FIDO_​REGISTRATION_​RESPONSE_​SUCCESS Fido registration response was executed with success.
FIDO_​REGISTRATION_​RESPONSE_​FAILURE Fido registration response failed.
FIDO_​TRUSTED_​FACETS_​REQUEST_​SUCCESS Fido trusted facets request was executed with success.
FIDO_​TRUSTED_​FACETS_​REQUEST_​FAILURE Fido trusted facets request failed.
FIDO_​USER_​AUTHENTICATOR_​REGISTERED Fido user authenticator was registered.
FIDO_​USER_​AUTHENTICATOR_​REGISTRATION_​FAILED Registration of fido user authenticator failed because no profile or fido policy mapping was found.
FIDO_​USER_​AUTHENTICATOR_​ALREADY_​REGISTERED Fido user authenticator is already registered.
FIDO_​USER_​AUTHENTICATOR_​DEREGISTERED Fido user authenticator was deregistered.
FIDO_​USER_​AUTHENTICATOR_​DEREGISTRATION_​FAILED Deregistration of fido user authenticator failed because no profile or fido policy mapping was found.
FIDO_​USER_​AUTHENTICATOR_​NOT_​REGISTERED_​TO_​DEREGISTER Fido authenticator is not registered for a user so it is not possible to deregister it.
FIDO_​USER_​AUTHENTICATOR_​NOT_​REGISTERED_​TO_​AUTHENTICATE Fido authenticator is not registered for a user so it is not possible to authenticate with it.
FIDO_​AUTHENTICATOR_​NOT_​ENABLED Fido authenticator is not enabled for this application.

Custom authenticators audit events

Event Description
CUSTOM_​AUTHENTICATOR_​BAD_​REQUEST Custom Authenticator API was reached, but the request was invalid. The details field contains the endpoint which was attempted.
CUSTOM_​AUTHENTICATOR_​DISABLED Custom Authenticator feature is disabled.
CUSTOM_​AUTHENTICATOR_​INVALID_​CLIENT Invalid client was used to attempt Custom Authenticators API. The reason is provided in details field.
CUSTOM_​AUTHENTICATOR_​CONNECTION_​ERROR Custom Authenticator API was attempted, but Extension Engine server could not be reached.
CUSTOM_​AUTHENTICATOR_​REGISTRATION_​SUCCESS Custom Authenticator registration request was executed with success.
CUSTOM_​AUTHENTICATOR_​REGISTRATION_​FAILURE Custom Authenticator registration request was executed with failure.
CUSTOM_​AUTHENTICATOR_​REGISTRATION_​INVALID_​ACCESS_​TOKEN Invalid access token was provided in Custom Authenticator registration request.
CUSTOM_​AUTHENTICATOR_​AUTHENTICATION_​SUCCESS Authentication using the custom authenticator was successful.
CUSTOM_​AUTHENTICATOR_​AUTHENTICATION_​FAILURE Authentication using the custom authenticator failed.
CUSTOM_​AUTHENTICATOR_​DEREGISTRATION_​SUCCESS Custom Authenticator deregistration request was executed with success.
CUSTOM_​AUTHENTICATOR_​DEREGISTRATION_​INVALID_​ACCESS_​TOKEN Invalid access token was provided in Custom Authenticator deregistration request.
CUSTOM_​AUTHENTICATOR_​RESPONSE_​INVALID Extension Engine returned unknown error status in response.
CUSTOM_​AUTHENTICATOR_​USER_​ALREADY_​REGISTERED Custom authenticator is already registered for the user.
CUSTOM_​AUTHENTICATOR_​USER_​NOT_​REGISTERED The user is not registered for this custom authenticator.
CUSTOM_​AUTHENTICATOR_​UNKNOWN_​USER The user was not recognized by the system.
CUSTOM_​AUTHENTICATOR_​INTERNAL_​SERVER_​ERROR Token Server was unable to generate custom authenticator access token for a user.