# IdentityNow password interceptor activity report

**URL:** <https://developer.sailpoint.com/discuss/t/identitynow-password-interceptor-activity-report/28276>\
**Category:** SHF Discussion and Questions\
**Tags:** reports, password-management, sailpoint-identity-security\
**Created:** [January 31, 2024, 12:37pm UTC](https://developer.sailpoint.com/discuss/t/identitynow-password-interceptor-activity-report/28276 "2024-01-31T12:37:33Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![hranjan3](https://avatars.discourse-cdn.com/v4/letter/h/ecb155/32.png) [@hranjan3](https://developer.sailpoint.com/discuss/u/hranjan3)\
**Post date:** [January 31, 2024, 12:37pm UTC](https://developer.sailpoint.com/discuss/t/identitynow-password-interceptor-activity-report/28276/1 "2024-01-31T12:37:33Z")

</div>

Hi, I am looking help on one use case. We have Password interceptor installed in our environment (Sailpoint Password interceptor client) which keeps checking password changed directly from AD system side and sync it across the system through IdentityNow. Here we are looking for some reports which we can tell us which all ids passwords are changed directly from AD system side (date/time, user info) and when the password sync happened from IDN side (with status success or failure).

Can anyone please suggest idea on this.

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [February 1, 2024, 1:50am UTC](https://developer.sailpoint.com/discuss/t/identitynow-password-interceptor-activity-report/28276/2 "2024-02-01T01:50:39Z")

</div>

Hi Himanshu,

I’ve moved your post to #idn:discussion-and-questions so you find the right audience!

---

<div class="post-metadata">

**Author:** ![kwhipple](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/kwhipple/32/4240_2.png) [@kwhipple](https://developer.sailpoint.com/discuss/u/kwhipple)\
**Post date:** [February 21, 2024, 11:53am UTC](https://developer.sailpoint.com/discuss/t/identitynow-password-interceptor-activity-report/28276/3 "2024-02-21T11:53:04Z")

</div>

Hello @hranjan3,

We use Splunk to retrieve all the PWI logs and have the Splunk app for IdentityNow that retrieves those logs. We can search and report from Splunk on data from both sources.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [April 21, 2024, 11:53am UTC](https://developer.sailpoint.com/discuss/t/identitynow-password-interceptor-activity-report/28276/4 "2024-04-21T11:53:38Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
