LoginFailure Audit records when using SCIM

We have a service that calls the SCIM API endpoints on a schedule, there are no errors in this service but within IIQ auditing, we can see audit events ‘loginfailure’ and the user shown in these audit events is the ‘client id’ for the account setup to call the SCIM API.

Does anyone have any thoughts or ideas on why the loginfailure audit is coming through even when there is no loss of service or error message in external / calling service?

@karena,

Can you please share error log so that we could see some more detail, please hide any sensitive information from the logs.

Hi @dheerajk27 ,
I don’t have any logs, all I have are audit records with loginFailure

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.