How to Log Username on Every User Login

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Hi everyone,

I’m working on a use case where I want to log the username of every user who logs into SailPoint IdentityIQ, even when using the default form-based login (not SSO).

2

Hi @Viraj ,

You can enable the login action in the audit configuration. Once enabled, you will be able to view the login audit events.

image
image883×309 15.3 KB

image
image601×256 10.1 KB

1 Like
3

I have enabled the Login from audit still iam not able to get the username of the loggedin user printed in syslog

4

Hi @Viraj ,

Have you searched the audit object with the action set to ‘Login’? Were you able to find any logs?
Please share a screenshot of the audit results

5

Hi @Viraj

Could you please mention your IdentityIQ version and application server name? Please also provide your log4j2 configuration if feasible.

Please check the Syslog Settings below:

image
image1242×295 14.3 KB

I would recommend checking your log4j2.properties file located at ../WEB-INF/classes.

6

no logs were generated

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Rule PUBLIC "sailpoint.dtd" "sailpoint.dtd">
<Rule name="LogLoginUsername" type="SSOAuthentication">
  <Source>
    <![CDATA[
    log.info("User logged in: " + username);
    return username;
    ]]>
  </Source>
</Rule>

this is the rule iam using

7

Hi @Viraj ,

You won’t get the username directly as mentioned. The httpRequest is an input argument for rule of type SSOAuthentication. You can extract the Identity or Link from the httpRequest. Please refer to the SSOAuthentication type rule for more details.

1 Like
8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.