RapidIdentity Integration Taxonomy
- 11 Mar 2024
- 1 Minute to read
- Print
- DarkLight
RapidIdentity Integration Taxonomy
- Updated on 11 Mar 2024
- 1 Minute to read
- Print
- DarkLight
Article summary
Did you find this summary helpful?
Thank you for your feedback
Ticket Taxonomy
Field Name | Sample Data | Description |
|---|---|---|
Event Action | net.idauto.audit.idp.action.authentication | The RapidIdentity event module |
Event ID | f4fac16a-b908-4b67-8eee-e8d6aad657c5 | The unique ID of the event |
Host IP | 10.103.122.207 | RapidIdentity internal system IP address |
City | Fort Worth | The city where the forwarded IP Address originates |
Country or Region | United States | The country where the forwarded IP address originates |
Destination Service Name | test.user@example.com | The target of the event |
Destination System Name | DIRECTORY | The system of the event |
Forwarded IP | 135.148.197.18 | The public IP address of the user/system that initiated the event |
Source Domain | idautoID=6afe6084-78fa-47a5-83ba-140d32cd051e,ou=Accounts,dc=meta | The dn of the user who initiated the event |
Source ID | 6afe6084-78fa-47a5-83ba-140d32cd051e | The idautoID of the user who initiated the event |
Source IP | 10.103.120.61 | RapidIdentity internal system IP Address |
State | TX | The state where the forwarded IP address originates |
Timestamp | 2023-11-15T21:39:29.678Z | The UTC timestamp of when the event occurred |
User Agent | Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.1 Mobile/15E148 Safari/604.1 | The device/browser that initiated the event |
Event Actions
Action Name | Description |
|---|---|
net.idauto.audit.idp.action.authentication | Authentication event through the RapidIdentity IDP |
idp.logout | Logout event through the RapidIdentity IDP |
net.idauto.audit.dss.action.runAction | The manual or job run of a RapidIdentity Connect action set |
net.idauto.audit.arms.groupmgmt.action.manualSync | The manual or automated synchronization of a RapidIdentity Role/Group |
net.idauto.audit.common.core.action.authentication | Authentication via RapidIdentity APIs. Non IDP authentication events |
core.apiLogout | Logout via RapidIdentity APIs. Non IDP logout events |
net.idauto.audit.arms.appaccess.action.applicationAccessed | The clicking of an application within the RapidIdentity Applications Module, Dashboard Module, or Go View |
ecp.authentication | SAML Enhanced Client or Proxy (ECP) authentication event. Most common with thick clients such as desktop applications. |
Was this article helpful?