RapidIdentity Integration Taxonomy
  • 11 Mar 2024
  • 1 Minute to read
  • Dark
    Light

RapidIdentity Integration Taxonomy

  • Dark
    Light

Article summary

Ticket Taxonomy

Field Name

Sample Data

Description

Event Action

net.idauto.audit.idp.action.authentication

The RapidIdentity event module

Event ID

f4fac16a-b908-4b67-8eee-e8d6aad657c5

The unique ID of the event

Host IP

10.103.122.207

RapidIdentity internal system IP address

City

Fort Worth

The city where the forwarded IP Address originates

Country or Region

United States

The country where the forwarded IP address originates

Destination Service Name

test.user@example.com

The target of the event

Destination System Name

DIRECTORY

The system of the event

Forwarded IP

135.148.197.18

The public IP address of the user/system that initiated the event

Source Domain

idautoID=6afe6084-78fa-47a5-83ba-140d32cd051e,ou=Accounts,dc=meta

The dn of the user who initiated the event

Source ID

6afe6084-78fa-47a5-83ba-140d32cd051e

The idautoID of the user who initiated the event

Source IP

10.103.120.61

RapidIdentity internal system IP Address

State

TX

The state where the forwarded IP address originates

Timestamp

2023-11-15T21:39:29.678Z

The UTC timestamp of when the event occurred

User Agent

Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.1 Mobile/15E148 Safari/604.1

The device/browser that initiated the event

Event Actions

Action Name

Description

net.idauto.audit.idp.action.authentication

Authentication event through the RapidIdentity IDP

idp.logout

Logout event through the RapidIdentity IDP

net.idauto.audit.dss.action.runAction

The manual or job run of a RapidIdentity Connect action set

net.idauto.audit.arms.groupmgmt.action.manualSync

The manual or automated synchronization of a RapidIdentity Role/Group

net.idauto.audit.common.core.action.authentication

Authentication via RapidIdentity APIs. Non IDP authentication events

core.apiLogout

Logout via RapidIdentity APIs. Non IDP logout events

net.idauto.audit.arms.appaccess.action.applicationAccessed

The clicking of an application within the RapidIdentity Applications Module, Dashboard Module, or Go View

ecp.authentication

SAML Enhanced Client or Proxy (ECP) authentication event. Most common with thick clients such as desktop applications.


Was this article helpful?


What's Next
ESC

Eddy AI, facilitating knowledge discovery through conversational intelligence