SAML Audit Activity Events

    This document lists the events and parameters for various types of SAML Audit activity events. You can retrieve these events by calling Activities.list() with applicationName=saml .

    Login event type. Events of this type are returned with type=login .

    Failed saml login.

    Event details
    Event name
    login_failure
    Parameters
    application_ name

    string

    Saml SP application name.

    device_ id

    string

    Saml Device ID.

    failure_ type

    string

    Login failure type. Possible values:

    • failure_app_not_configured_for_user
      Whether the login failed because of app not configured for user.
    • failure_app_not_enabled_for_user
      Whether the login failed because of app not enabled for user.
    • failure_invalid_sp_id
      Whether the login failed because of invalid SP id.
    • failure_invalid_user_id_mapping
      Whether the login failed because of invalid userid mapping requested.
    • failure_malformed_request
      Whether the login failed because of malformed request.
    • failure_no_passive
      Whether the login failed because of failing to authenticate user passively.
    • failure_request_denied
      Whether the login failed because of request denied.
    • failure_unknown
      Whether the login failed because of unknown reason.
    • failure_user_id_mapping_unavailable
      Whether the login failed because of userid mapping unavailable.
    initiated_ by

    string

    Requester of saml authentication. Possible values:

    • idp
      Saml authentication initiated by IdP.
    • sp
      Saml authentication initiated by SP.
    orgunit_ path

    string

    User orgunit.

    saml_ second_ level_ status_ code

    string

    Response second level status.

    saml_ status_ code

    string

    Response status.

    Sample request
    GET https://admin.googleapis.com /admin /reports /v1 /activity /users /all /applications / saml ?eventName= login_failure &maxResults=10 &access_token= YOUR_ACCESS_TOKEN
    Admin Console message format
    {actor} failed to login because of the following error: {failure_type}

    Successful saml login.

    Event details
    Event name
    login_success
    Parameters
    application_ name

    string

    Saml SP application name.

    device_ id

    string

    Saml Device ID.

    initiated_ by

    string

    Requester of saml authentication. Possible values:

    • idp
      Saml authentication initiated by IdP.
    • sp
      Saml authentication initiated by SP.
    orgunit_ path

    string

    User orgunit.

    saml_ status_ code

    string

    Response status.

    Sample request
    GET https://admin.googleapis.com /admin /reports /v1 /activity /users /all /applications / saml ?eventName= login_success &maxResults=10 &access_token= YOUR_ACCESS_TOKEN
    Admin Console message format
    {actor} logged in
    Design a Mobile Site
    View Site in Mobile | Classic
    Share by: