Token Server audit events

Event	Description
CONSENT GIVEN	User has given consent for a set of scopes for a client.
CONSENT CSRF INVALID	The CSRF token provided while submitting a consent is invalid. A CSRF token is only valid for a limited amount of time. All details in the request should match the values expected for this particular CSRF token.
API AUTHENTICATION FAILED	Invalid username and password provided while accessing the end user API.
API CONSENT LISTED	A list of consents was returned for a user via the end user API.
API CONSENT NO DATA FOUND	No consents could be found for a user via the end user API.
API CONSENT REMOVED	Consent for a client (all scopes) is removed for a user via the end user API.
API CONSENT NOT REMOVED NOT FOUND	Unable to remove consent via the end user API because no corresponding consent could be found.
API CONSENT NOT REMOVED FORBIDDEN	Unable to remove a consent via the end user API because the consent requested for removal does not belong to the specified user.
API TOKENS LISTED	A list of access tokens was returned for a user via the end user API.
API TOKENS NO DATA FOUND	No access tokens could be found for a user via the end user API.
API TOKEN REMOVED	Access token for a client is removed for a user via the end user API.
API TOKEN NOT REMOVED NOT FOUND	Unable to remove an access token via the end user API because no corresponding access token could be found.
API TOKEN NOT REMOVED FORBIDDEN	Unable to remove a token via the end user API because the token requested for removal does not belong to the specified user.
API NOTIFICATION SETTING NOT FOUND	No corresponding user is found for the requested notification setting via the end user API.
API NOTIFICATION SETTING FOUND	Notification setting is found or the user does exist and uses the default notification setting. This value is returned for the user via the end user API.
API NOTIFICATION SETTING REMOVED	Notification setting removed for a user via the end user API.
API NOTIFICATION SETTING SET	Notification setting set for a user via the end user API.
API NOTIFICATION SETTING SET FAILED	Unable to set notification setting for a user via the end user API. Only values SMS and EMAIL are allowed.
API DEVICES LISTED	A list of devices was returned for a user via the end user API.
API DEVICES NO DATA FOUND	No devices could be found for a user via the end user API.
API DEVICE REMOVED	Device for a user is removed via the end user API.
API DEVICE REMOVED FOR ONE PROFILE	Device data related to one user profile was removed via the end user API.
API DEVICE NOT REMOVED FORBIDDEN	Unable to remove a device via the end user API because the device requested for removal does not belong to the specified user.
API FINGER PRINT NOT DISABLED CLIENT NOT FOUND	Unable to disable finger print via the end user API because no corresponding device could be found.
API FINGER PRINT NOT DISABLED FORBIDDEN	Unable to disable finger print via the end user API because no the device requested does not belong to the specified user.
API FINGER PRINT DISABLED	Finger print was disabled for the specified user and device.
API APP LISTED	A list of applications was returned for a user via the end user API
API APP NO DATA FOUND	No applications could be found for a user via the end user API
API APP REMOVED	Access to an application for a user is removed via the end user API
API APP NOT REMOVED NOT FOUND	No applications to remove could be found for a user via the end user API
API AUTHENTICATION APPS LISTED	A list of authentication app instances was returned for a user via the end user API.
API AUTHENTICATION APP NOT FOUND	No authentication app instances could be found for a user via the end user API.
API AUTHENTICATION APP REMOVED	The push authentication capabilities for an app were removed for a user via the end user API.
API AUTHENTICATION APP NOT REMOVED NOT FOUND	The push authentication capabilities for an app could not be removed because app instance could not be found via the end user API.
API AUTHENTICATION APP NOT REMOVED FORBIDDEN	The push authentication capabilities for an app could not be removed because app instance belongs to other user.
API AUTHENTICATION APP AND USER CLIENT KEYS REMOVED	The mobile authentication capabilities for a client were removed for a user via the end user API.
API AUTHENTICATION USER CLIENT KEYS NOT REMOVED NOT FOUND	The mobile authentication capabilities for a client could not be removed because user client keys could not be found via the end user API.
API AUTHENTICATION USER CLIENT KEYS NOT REMOVED FORBIDDEN	The mobile authentication capabilities for a client could not be removed because user client keys belongs to other user.
API PAYLOAD ENCRYPTION APPLICATION DISABLED	App version is disabled.
API PAYLOAD ENCRYPTION POLICY NOT FOUND	No payload encryption policy could be found via the the API endpoint.
API PAYLOAD ENCRYPTION INVALID PARAMETERS	Invalid parameters were forwarded to the API endpoint.
API PAYLOAD ENCRYPTION POLICY FOUND	A payload encryption policy was returned for a Security Proxy via the API endpoint.
API PAYLOAD ENCRYPTION INVALID ACCESS TOKEN	Access token could not be found or was invalid.
API VERSION NOT ALLOWED	The used endpoint is not allowed for the api version used by the client.
EXTERNAL SCOPE CHECK FAILED	An error occurred while performing the external scope check via the scope service endpoint.
EXTERNAL NOTIFICATION FAILED	An error occurred while sending a notification to the user via the external notification service.
ADMIN AUTHENTICATION FAILURE	User has entered an incorrect username and/or password to log in into the admin console.
ADMIN AUTHENTICATION SUCCESS	User has successfully logged into the admin console. The details provide information about the roles that the user has in the admin console. No roles means that he does not have any permissions.
ADMIN CLIENT DELETED	An oauth client has been deleted via the admin console.
ADMIN CLIENT UPDATED	An oauth client has been updated via the admin console.
ADMIN STATIC CLIENT CREATED	A static oauth client has been created via the admin console.
ADMIN API CLIENT CREATED	An oauth client for API calls has been created via the admin console.
ADMIN SCOPE DELETED	An oauth scope has been deleted via the admin console.
ADMIN SCOPE CREATED	An oauth scope has been created via the admin console.
ADMIN SCOPE UPDATED	An oauth scope has been updated via the admin console.
ADMIN MOBILE APP CREATED	A mobile application has been created via the admin console.
ADMIN MOBILE APP DELETED	A mobile application has been deleted via the admin console.
ADMIN MOBILE APP UPDATED	A mobile application has been updated via the admin console.
ADMIN MOBILE PLATFORM CREATED	A mobile platform has been created via the admin console.
ADMIN MOBILE PLATFORM DELETED	A mobile platform has been deleted via the admin console.
ADMIN MOBILE PLATFORM UPDATED	A mobile platform has been updated via the admin console.
ADMIN MOBILE CONFIG UPDATED	The configuration for mobile authentication has been changed in the admin console.
ADMIN CORS CONFIG UPDATED	The configuration for CORS has been changed in the admin console.
ADMIN SYSTEM FEATURE CONFIG UPDATED	The configuration for system features has been changed in the admin console.
ADMIN MOBILE PLATFORM VERSION CREATED	An App version has been created for a mobile application via the admin console.
ADMIN MOBILE PLATFORM VERSION UPDATED	An App version has been updated for a mobile application via the admin console.
ADMIN MOBILE PLATFORM VERSION DELETED	An App version has been deleted for a mobile application via the admin console.
ADMIN AUTH PROPERTIES SET CREATED	Mobile authentication type has been created via the admin console.
ADMIN AUTH PROPERTIES SET UPDATED	Mobile authentication type has been updated via the admin console.
ADMIN AUTH PROPERTIES SET DELETED	Mobile authentication type has been deleted via the admin console.
ADMIN CALLBACK CONFIG CREATED	Callback configuration has been created via the admin console.
ADMIN CALLBACK CONFIG UPDATED	Callback configuration has been updated via the admin console.
ADMIN CALLBACK CONFIG DELETED	Callback configuration has been deleted via the admin console.
ADMIN PUSH MESSAGING CONFIG CREATED	Push messaging configuration has been created via the admin console.
ADMIN PUSH MESSAGING CONFIG UPDATED	Push messaging configuration has been updated via the admin console.
ADMIN PUSH MESSAGING CONFIG DELETED	Push messaging configuration has been deleted via the admin console.
ADMIN IDENTITY PROVIDER CREATED	An identity provider has been created via the admin console.
ADMIN IDENTITY PROVIDER DELETED	An identity provider has been deleted via the admin console.
ADMIN IDENTITY PROVIDER UPDATED	An identity provider has been updated via the admin console.
ADMIN IDENTITY PROVIDER ATTRIBUTE MAPPING CREATED	An attribute mapping has been created for an identity provider via the admin console.
ADMIN IDENTITY PROVIDER ATTRIBUTE MAPPING DELETED	An attribute mapping has been deleted for an identity provider via the admin console.
ADMIN IDENTITY PROVIDER ATTRIBUTE MAPPING UPDATED	An attribute mapping has been updated for an identity provider via the admin console.
ADMIN PIN POLICY CREATED	A pin policy has been created via the admin console.
ADMIN PIN POLICY UPDATED	A pin policy has been updated via the admin console.
ADMIN MESSAGE CREATED	A translation has been created via the admin console.
ADMIN MESSAGE DELETED	A translation has been deleted via the admin console.
ADMIN MESSAGE UPDATED	A translation has been updated via the admin console.
ADMIN USER REVOKED	Revoke user from a device via the admin console.
ADMIN APPLICATION INSTANCE REVOKED	Revoke mobile authentication for a user via the admin console.
ADMIN APPLICATION INSTANCE NOT REVOKED NOT FOUND	Attempt to revoke mobile authentication for a user via the admin console, but no mobile authentication was found.
ADMIN APPLICATION INSTANCE NOT REVOKED INCORRECT DEVICE	Attempt to revoke mobile authentication for a user via the admin console, but the device does not match.
ADMIN TEMPLATES TEMPLATE SETS CREATED	A template set has been added via the admin console.
ADMIN TEMPLATES TEMPLATE SETS UPDATED	A template set has been modified via the admin console.
ADMIN TEMPLATES TEMPLATE SETS DELETED	A template set has been removed via the admin console.
ADMIN FIDO CONFIG UPDATED	The FIDO configuration has been modified via the admin console.
ADMIN FIDO POLICY MAPPING CREATED	A FIDO Policy mapping has been added via the admin console.
ADMIN FIDO POLICY MAPPING UPDATED	A FIDO Policy mapping has been modified via the admin console.
ADMIN FIDO POLICY MAPPING DELETED	A FIDO Policy mapping has been removed via the admin console.
HELPDESK CLIENT DELETE UNAUTHORIZED	Attempt to delete a dynamic client via the admin console, but this operation is not permitted for the admin user.
HELPDESK APPLICATION INSTANCE NOT REVOKED FORBIDDEN	Attempt to revoke mobile authentication for a user via the admin console, but this operation is not permitted for the admin user.
HELPDESK APPLICATION INSTANCE REVOKE UNAUTHORIZED	Attempt to revoke mobile authentication for a user via the admin console, but this operation is not permitted for the admin user.
CLIENT CREDENTIALS CHECK SUCCESS	Successfully verified the client credentials
CLIENT CREDENTIALS CHECK SKIPPED	The client credentials are not validated because the application is running in development mode.
CLIENT CREDENTIALS CHECK FAILED	Could not verify the client credentials
CLIENT VALIDATION INVALID HEADER	Client validation failed because one or more required headers is missing or no mobile application can be found based on the header values.
CLIENT VALIDATION VERSION DISABLED	Client validation failed because the version has been disabled
CLIENT VALIDATION UPGRADE INITIALIZED	Client validation resulted in the initialization of Dynamic Client Upgrade.
CLIENT VALIDATION DEBUGGER DETECTED	Client validation failed because debugger was detected
CLIENT VALIDATION JAILBREAK DETECTED	Client validation failed because jailbreak was detected
CLIENT VALIDATION ABUSE DETECTED	Client validation failed because abuse was detected. Verify the application signature.
CLIENT VALIDATION OS VERSION INVALID	Client validation failed because client's OS version is not supported or blacklisted.
DYNAMIC REG INVALID HEADER	Unable to perform dynamic client registration because one or more required headers is missing or no mobile application can be found based on the header values.
DYNAMIC REG INVALID REQUEST	Unable to perform dynamic client registration because identifier or challenge response is not available in request.
DYNAMIC REG SUCCESS	New client was registered via dynamic client registration.
DYNAMIC REG FAILED	Dynamic client registration failed due to invalid challenge response.
DYNAMIC REG NEW REGISTRATIONS DISABLED	Dynamic client registration failed because new registrations are disabled
DYNAMIC REG VERSION DISABLED	Dynamic client registration failed because the version is disabled
DYNAMIC REG OS VERSION INVALID	Dynamic client registration failed because client's OS version is not supported or blacklisted.
DYNAMIC UP SUCCESS	Dynamic client upgrade was successfully executed, the application version associated with the dynamic client was updated.
DYNAMIC UP FAILED	Dynamic client upgrade failed
AUTHORIZATION LVL UNSUPPORTED	The authentication level specified in the authentication level header of the incoming request can not be parsed to a valid integer value.
AUTHORIZATION FAILED UNABLE TO GENERATE ID TOKEN	Error occured during id token generation process, check OpenId Connect signing/encryption properties.
AUTHZ REQUEST AUTHENTICATION LVL INSUFFICIENT	The authentication level specified in the authentication level header of the incoming request is lower then the required authentication level by one or more of the requested scopes.
AUTHZ REQUEST INVALID	The Oauth authorization request is missing one or more required fields.
AUTHZ REQUEST REDIRECT URI INVALID	The provided redirect uri does not match the configured redirect uri for the specified client.
AUTHZ REQUEST SCOPE INVALID	One or more of the requested scopes is not available for the specified client.
AUTHZ REQUEST NOT AUTHORIZED FOR SCOPE	The user does not have a product for the requested scope.
AUTHZ REQUEST GRANT CREATED	An authorization code is created for the requested client and scopes.
AUTHZ REQUEST TOKEN CREATED	An access token is created for the requested client and scopes via the implicit flow.
AUTHZ REQUEST INVALID RESPONSE TYPE	The response type used does not match a grant type selected for the client. Or the response type is not a valid grant type supported by the application.
TOKEN REQUEST INVALID	The access token request is missing one or more required fields.
TOKEN REQUEST INVALID GRANT	The access grant used to request an access token was expired or revoked.
TOKEN REQUEST SCOPE INVALID	One or more of the requested scopes is not available for the specified client.
TOKEN REQUEST NOT AUTHORIZED FOR SCOPE	The user does not have a product for the requested scope.
TOKEN REQUEST INVALID CLIENT CREDENTIALS	Provided client id and client secret do not match.
TOKEN REQUEST INVALID REFRESH TOKEN	No access token could be found based on the provided refresh token.
TOKEN REQUEST INVALID BEARER TOKEN	No access token could be found based on the provided bearer token.
TOKEN REQUEST DISABLED GRANT TYPE	The required grant type is not enabled for the client.
TOKEN REQUEST UNSUPPORTED GRANT TYPE	Grant type used is not recognized and supported by the application.
TOKEN REQUEST INVALID CLIENT	No client could be found based on the specified client id.
TOKEN REQUEST ACCESS TOKEN CREATED	Access token created via provided authorization code.
TOKEN REQUEST ACCESS TOKEN REFRESHED	A new access token is created based on the provided refresh token.
TOKEN REQUEST INVALID ACCESS TOKEN	The access token used is expired or revoked.
TOKEN REQUEST ACCESS TOKEN VALIDATED	The access token used was successfully validated.
TOKEN REQUEST FINGER PRINT INVALID CLIENT CREDENTIALS	The client credentials used to fetch a finger print refresh token were invalid.
TOKEN REQUEST FINGER PRINT INVALID REFRESH TOKEN	The refresh token used to fetch a finger print refresh token was invalid.
TOKEN REQUEST FINGER PRINT TOKEN CREATED	A refresh token for finger print usage was created and the original refresh token was refreshed.
TOKEN REQUEST FINGER PRINT ACCESS TOKEN REFRESHED	The finger print refresh token was refreshed
TOKEN REQUEST FINGER PRINT REFRESH TOKEN RETRY COUNT EXCEEDED	The finger print refresh token used was wrong, therefore all finger print refresh tokens for this client are removed
TOKEN REQUEST INVALID PROFILE ID	Provided profile id has invalid format or is already used by other user of the client.
TOKEN REVOKE ACCESS TOKEN SUCCESS	The access token was successfully revoked, corresponding refresh token when available is not revoked.
TOKEN REVOKE ACCESS TOKEN INVALID	The access token could not be revoked.
TOKEN REVOKE REFRESH TOKEN SUCCESS	The refresh token was successfully revoked including the access tokens based on this refresh token.
TOKEN REVOKE REFRESH TOKEN INVALID	The refresh token could not be revoked.
TOKEN REQUEST REFRESH TOKEN RETRY COUNT EXCEEDED	The refresh token has been used wrongly for more than the maximum allowed retries. The refresh token is invalidated.
TOKEN REVOKE CLIENT INVALID	The token could not be revoked because the client is not found or the client credentials are invalid.
TOKEN REVOKE TOKEN INVALID	The token could not be revoked because it is not found. There was no token type hint specified in the request.
TOKEN REVOKE CLIENT TOKENS SUCCESS	All tokens available for a client were removed via the client tokens revocation endpoint.
TOKEN REVOKE PROFILE SUCCESS	All tokens available for a profile were removed via the profile revocation endpoint.
TOKEN REVOKE CLIENT FINGER PRINT TOKENS SUCCESS	All fingerprint tokens available for a client were removed via the token revocation endpoint.
TOKEN REVOKE PROFILE TOKENS SUCCESS	All tokens available for a profile on a client were revoked using the profile token revocation endpoint.
TOKEN REVOKE PROFILE FINGER PRINT TOKENS SUCCESS	All fingerprint tokens available for a profile on a client were removed using the profile token revocation endpoint.
ENROLLMENT FAILURE DISABLED	Failed to process the enrollment request because enrollment is disabled.
ENROLLMENT INITIALIZED	Successfully initialized the enrollment process.
ENROLLMENT INIT FAILURE INVALID REQ	Failed to initialize enrollment because input params were invalid.
ENROLLMENT INIT FAILURE INVALID TOKEN	Failed to initialize enrollment because the access token was invalid.
ENROLLMENT KEY FETCHED	Successfully fetched the public key for the mobile authentication server.
ENROLLMENT KEY FAILURE INVALID ID	Failed to generate the public key because the given identifier was not found.
ENROLLMENT ACK SUCCESS	Successfully acknowledged the enrollment.
ENROLLMENT KEY FAILURE INVALID REQ	Failed to generate the public key because input params were invalid.
ENROLLMENT ACK FAILURE INVALID ID	Failed to acknowledge the enrollment because the given identifier was not found.
ENROLLMENT UPDATE SUCCESS	Successfully updated the push token.
ENROLLMENT UPDATE FAILURE INVALID REQ	Failed to update the push token because input params were invalid or the old push token provided did not match the client's current push token.
ENROLLMENT UPDATE FAILURE INVALID TOKEN	Failed to update the push token because the access token was invalid.
ENROLLMENT UPDATE FAILURE UNSUPPORTED PLATFORM	Failed to update the push token because the client's platform is not supported by this operation.
ONE TIME PASSWORD AUTH SUCCEEDED	Successfully authenticated using One Time Password.
ONE TIME PASSWORD AUTH FAILED	One Time Password authentication failed.
ONE TIME PASSWORD GENERATION FAILED MISSING USER ID	Failed to generate One Time Password due to a missing user identifier.
API ACCESS NOT ALLOWED INVALID CREDENTIALS	The client credentials provided to access the API were invalid.
API ACCESS NOT ALLOWED DISABLED GRANT TYPE	The required grant type to access the API is not enabled for the client.
API ACCESS NOT ALLOWED INVALID SCOPES	The required scope to access the API is not enabled for the client.
API ACCESS GRANTED	Access to the API was successfully granted.
PUSH AUTH RESEND FAILURE RESEND LIMIT REACHED	Failed to resend push message because the resend limit was reached.
PUSH AUTH RESEND FAILURE NO APP INSTANCE	Failed to resend push message because no authentication app configured for the user.
PUSH AUTH RESEND FAILURE	Failed to resend push message, unable to connect with Push Notification Service or push message rejected.
PUSH AUTH RESEND SUCCESS	Successfully resend push message.
PUSH AUTH TRANSACTION SIGNING FAILED INVALID TRANSACTION	Invalid verify transaction signature request because of an unknown transaction.
PUSH AUTH TRANSACTION SIGNING FAILED REQUIRE OFFLINE AUTH	Invalid verify transaction signature request because transaction requires offline authentication.
PUSH AUTH TRANSACTION SIGNING FAILED ENDPOINT NOT ALLOWED	Endpoint not allowed for unsigned authentication transactions.
PUSH AUTH TRANSACTION SIGNING FAILED TO DECRYPT MESSAGE	Invalid verify transaction signature request because it could not be decrypted.
PUSH AUTH TRANSACTION SIGNING FAILED INVALID TRANSACTION DATA	Invalid verify transaction signature request because transaction signature data contains invalid parameters.
PUSH AUTH TRANSACTION SIGNING FAILED NOT AUTHENTICATED	Invalid verify transaction signature request because the transaction is not authenticated.
PUSH AUTH TRANSACTION SIGNING FAILED TRANSACTION EXPIRED	Invalid verify transaction signature request because the transaction has expired.
PUSH AUTH CALLBACK SENT	The authentication initializer was informed about the authentication result via a callback.
PUSH AUTH CALLBACK FAILED	An error occurred while sending a callback to the authentication initializer.
PUSH AUTH VALIDATION PIN LIMIT EXCEEDED	Exceeded allowed push with PIN answer attempts due to invalid PIN, therefore the user is revoked for this application instance.
PUSH AUTH VALIDATION FINGER PRINT LIMIT EXCEEDED	The wrong finger print was used via push authentication, therefore fingerprint authentication is revoked for this user.
PUSH AUTH TRANSACTION RETRIEVED	Authentication transaction successfully retrieved.
PUSH AUTH TRANSACTION NOT RETRIEVED	Failed to retrieve authentication transaction, invalid transaction id.
PUSH AUTH NOT AUTHENTICATED INVALID REFRESH TOKEN	Failed to answer push message due to invalid refresh token.
SMS AUTH INIT FAILURE PHONE NUMBER INVALID OR MISSING	Failed to initialise SMS authentication, phone number missing or invalid.
SMS AUTH INIT FAILURE FAILED TO SEND SMS	Failed to initialise SMS authentication - failed to send SMS.
SMS AUTH NOT AUTHENTICATED INVALID VERIFICATION CODE	Failed to authenticate via SMS, wrong verification code.
SMS AUTH INIT FAILURE DISABLED	Failed to initialise sms authentication, functionality disabled.
SMS AUTH INIT MESSAGE SENT	Sms authentication message has been successfully sent.
PUSH AUTH FETCH SECURED MESSAGE FETCHED	Successfully fetched secured authentication message.
PUSH AUTH FETCH FAILED INVALID TRANSACTION	Failed to fetch secured authentication message due to invalid transaction id.
PUSH AUTH FETCH FAILED TRANSACTION ALREADY FETCHED	Failed to fetch secured authentication message due to transaction can be fetched only once.
PUSH AUTH FETCH FAILED TRANSACTION EXPIRED	Failed to fetch secured authentication message due to expired transaction.
SMS AUTH AUTHENTICATED	Successfully authenticated via sms
SMS AUTH FAILURE INVALID TRANSACTION	Failed to authenticate via SMS, invalid transaction identifier.
SMS AUTH VALIDATION LIMIT EXCEEDED	Exceeded allowed SMS code verification attempts, transaction revoked.
SMS RESEND FAILED	Resending of sms failed. The details field contains the cause.
SMS RESEND SUCCEEDED	Resending of sms succeeded.
UNABLE TO DETERMINE IDENTITY PROVIDER	No identity provider could be selected for the incoming authentication request.
MOBILE CLIENT UPDATED PLATFORM VERSION	Updated the App version for a client
SMS STEP UP CSRF INVALID	The CSRF token provided while submitting a sms code is invalid. A CSRF token is only valid for a limited amount of time. All details in the request should match the values expected for this particular CSRF token.
SMS STEP UP CODE INVALID	The code submitted during sms step up was invalid.
IDP OAUTH STATE MISMATCH	The expected value for the state parameter from the OAuth IdP does not match the stored value, or one of the state values is missing.
IDP OAUTH MISSING ACCESS GRANT	The OAuth IdP did not return an access grant.
IDP OAUTH MISSING ACCESS TOKEN	The OAuth IdP did not return an access token.
IDP OAUTH MISSING USER INFO	The OAuth IdP did not return user information or the response was in an unexpected format.
FIDO REQUEST	Fido UAF request was executed. The details field contains info about execution status, operation type (registration,authentication,deregistration) and FIDO policy id.
FIDO RESPONSE	Fido UAF response was executed. The details field contains info about execution status and operation type (registration,authentication,deregistration).
FIDO TRUSTED FACETS REQUEST	Fido Trusted Facets request was executed. The details field contains info about execution status and application id.
FIDO BAD REQUEST	Fido request or response was attempted, but the request was invalid. The details field contains the body of the request.
FIDO CONNECTION ERROR	Fido request or response was attempted, but Fido server could not be reached.
FIDO MISSING USERNAME	Fido request or response from Fido server does not contain required username parameter.
FIDO DISABLED	Fido authentication feature is disabled.
FIDO REGISTRATION REQUEST SUCCESS	Fido registration request was executed with success.
FIDO REGISTRATION REQUEST FAILURE	Fido registration request failed.
FIDO AUTHENTICATION REQUEST SUCCESS	Fido authentication request was executed with success.
FIDO AUTHENTICATION REQUEST FAILURE	Fido authentication request failed.
FIDO DEREGISTRATION REQUEST SUCCESS	Fido deregistration request was executed with success.
FIDO DEREGISTRATION REQUEST FAILURE	Fido deregistration request failed.
FIDO RESPONSE ACCESS TOKEN NOT FOUND	Fido response was executed with success, but there was no default Access Token for a user.
FIDO AUTHENTICATION RESPONSE SUCCESS	Fido authentication response was executed with success.
FIDO AUTHENTICATION RESPONSE FAILURE	Fido authentication response failed.
FIDO REGISTRATION RESPONSE SUCCESS	Fido registration response was executed with success.
FIDO REGISTRATION RESPONSE FAILURE	Fido registration response failed.
FIDO TRUSTED FACETS REQUEST SUCCESS	Fido trusted facets request was executed with success.
FIDO TRUSTED FACETS REQUEST FAILURE	Fido trusted facets request failed.
FIDO USER AUTHENTICATOR REGISTERED	Fido user authenticator was registered.
FIDO USER AUTHENTICATOR REGISTRATION FAILED	Registration of fido user authenticator failed because no profile or fido policy mapping was found.
FIDO USER AUTHENTICATOR ALREADY REGISTERED	Fido user authenticator is already registered.
FIDO USER AUTHENTICATOR DEREGISTERED	Fido user authenticator was deregistered.
FIDO USER AUTHENTICATOR DEREGISTRATION FAILED	Deregistration of fido user authenticator failed because no profile or fido policy mapping was found.
FIDO USER AUTHENTICATOR NOT REGISTERED TO DEREGISTER	Fido authenticator is not registered for a user so it is not possible to deregister it.
FIDO USER AUTHENTICATOR NOT REGISTERED TO AUTHENTICATE	Fido authenticator is not registered for a user so it is not possible to authenticate with it.
FIDO AUTHENTICATOR NOT ENABLED	Fido authenticator is not enabled for this application.

SAML

Event	Description
IDP SAML SINGLE LOGOUT USER NOT FOUND	An SLO request was received, but the corresponding access grants or tokens did not exist or were already expired.
IDP SAML SINGLE LOGOUT SUCCESS	A user was logged out via an IdP-initiated single logout request.

Key enrollment audit events

Event	Description
KEY ENROLLMENT SUCCESS	Successfully enrolled keys for a user.
KEY ENROLLMENT FAILURE INVALID REQUEST	Failed to process the key enrollment request because input parameters were invalid.
KEY ENROLLMENT FAILURE DISABLED	Failed to process the key enrollment request because the key enrollment is disabled.
KEY ENROLLMENT FAILURE UPDATE DISABLED	Failed to perform key enrollment because the update of the keys for the key enrollment is disabled.
KEY ENROLLMENT FAILURE INVALID TOKEN	Failed to perform key enrollment because the access token was invalid.

Push enrollment audit events

Event	Description
PUSH ENROLLMENT SUCCESS	The user was successfully enrolled for mobile authentication with push.
PUSH ENROLLMENT FAILURE FEATURE DISABLED	Failed to enroll for push because the feature is disabled.
PUSH ENROLLMENT FAILURE INVALID REQ	Failed to enroll for push because the request was malformed or had missing parameters.
PUSH ENROLLMENT FAILURE INVALID ACCESS TOKEN	Failed to enroll for push because the access token that was provided was invalid.
PUSH ENROLLMENT FAILURE KEYS NOT EXCHANGED	Failed to enroll for push because the user has not yet performed key enrollment (required for push).
PUSH ENROLLMENT FAILURE EXISTING PUSH TOKEN	Failed to enroll for push because the push token provided is already in use by another device or instance.
PUSH ENROLLMENT FAILURE USER ALREADY ENROLLED	Failed to enroll for push because the user is already enrolled for push.
PUSH ENROLLMENT DROP EXISTING APP INSTANCE	While enrolling for push, an existing enrollment was dropped.

Mobile authentication initialization events

Event	Description
MOBILE AUTH INIT FAILURE INVALID REQ	Failed to initialize mobile authentication because input parameters were invalid.
MOBILE AUTH INIT FAILURE INVALID AUTH PROPERTIES NAME	Failed to initialize authentication because the given name of the mobile authentication type was invalid.
PUSH AUTH INITIALIZED	Successfully initialized push authentication for a user.
PUSH AUTH INIT FAILURE	Failed to initialize authentication, unable to connect with Push Notification Service or push message rejected.
PUSH AUTH INIT FAILURE NO APP INSTANCE	Failed to initialize authentication because no authentication app configured for the user.
PUSH AUTH INIT FAILURE AUTH METHOD NOT AVAILABLE	Failed to initialize authentication because the chosen authentication method is not available for the user.
PUSH AUTH INIT FAILURE DISABLED	Failed to initialize authentication because push authentication disabled.
PUSH AUTH INIT FAILURE MESSAGE TOO LONG	Failed to initialize authentication because message content was too long.
OTP AUTH INITIALIZED	Otp authentication successfully initialized.

Mobile authentication answer events

Event	Description
MOBILE AUTH AUTHENTICATED	Successfully authenticated via mobile authentication.
MOBILE AUTH NOT AUTHENTICATED	User rejected authentication via mobile authentication.
MOBILE AUTH NOT AUTHENTICATED INVALID TOKEN	Invalid mobile authentication answer received because of an invalid authentication token.
PUSH AUTH NOT AUTHENTICATED INVALID TRANSACTION	Invalid push authentication answer received because of an unknown transaction.
PUSH AUTH NOT AUTHENTICATED REQUIRE OFFLINE AUTH	Invalid push authentication answer received because transaction requires offline authentication.
PUSH AUTH NOT AUTHENTICATED TRANSACTION EXPIRED	Invalid push authentication answer received because the transaction has expired.
PUSH AUTH NOT AUTHENTICATED INVALID ENDPOINT VERSION	Invalid push authentication answer endpoint version was used for authentication transaction.
PUSH AUTH NOT AUTHENTICATED FAILED TO DECRYPT MESSAGE	Invalid push authentication answer received because it could not be decrypted.

Custom authenticators audit events

Event	Description
CUSTOM AUTHENTICATOR BAD REQUEST	Custom Authenticator API was reached, but the request was invalid. The details field contains the endpoint which was attempted.
CUSTOM AUTHENTICATOR DISABLED	Custom Authenticator feature is disabled.
CUSTOM AUTHENTICATOR INVALID CLIENT	Invalid client was used to attempt Custom Authenticators API. The reason is provided in details field.
CUSTOM AUTHENTICATOR CONNECTION ERROR	Custom Authenticator API was attempted, but Extension Engine server could not be reached.
CUSTOM AUTHENTICATOR REGISTRATION SUCCESS	Custom Authenticator registration request was executed with success.
CUSTOM AUTHENTICATOR REGISTRATION FAILURE	Custom Authenticator registration request was executed with failure.
CUSTOM AUTHENTICATOR REGISTRATION INVALID ACCESS TOKEN	Invalid access token was provided in Custom Authenticator registration request.
CUSTOM AUTHENTICATOR AUTHENTICATION SUCCESS	Authentication using the custom authenticator was successful.
CUSTOM AUTHENTICATOR AUTHENTICATION FAILURE	Authentication using the custom authenticator failed.
CUSTOM AUTHENTICATOR DEREGISTRATION SUCCESS	Custom Authenticator deregistration request was executed with success.
CUSTOM AUTHENTICATOR DEREGISTRATION INVALID ACCESS TOKEN	Invalid access token was provided in Custom Authenticator deregistration request.
CUSTOM AUTHENTICATOR RESPONSE INVALID	Extension Engine returned unknown error status in response.
CUSTOM AUTHENTICATOR USER ALREADY REGISTERED	Custom authenticator is already registered for the user.
CUSTOM AUTHENTICATOR USER NOT REGISTERED	The user is not registered for this custom authenticator.
CUSTOM AUTHENTICATOR UNKNOWN USER	The user was not recognized by the system.
CUSTOM AUTHENTICATOR INTERNAL SERVER ERROR	Token Server was unable to generate custom authenticator access token for a user.