Filter Okta System Logs for Successful SAML, OIDC, and WS-Fed Logins
Last Updated:
Single Sign-On
Okta Classic Engine
Okta Identity Engine
Overview
The Okta System Log provides the data required to calculate Single Sign-On (SSO) login success rates for Security Assertion Markup Language (SAML), OpenID Connect (OIDC), and Web Services Federation (WS-Fed) protocols. Enter specific queries into the Okta System Log search bar to filter and track successful authentications for each protocol.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- System Log
- Single Sign-On (SSO)
- Security Assertion Markup Language (SAML)
- OpenID Connect (OIDC)
- Web Services Federation (WS-Fed)
Solution
How does Okta filter successful SAML authentications?
Enter the provided SAML query into the Okta System Log search bar to filter and calculate successful SSO authentications.
eventType eq "user.authentication.sso" and debugContext.debugData.signOnMode eq "SAML 2.0" and outcome.result eq "SUCCESS"How does Okta filter successful WS-Fed authentications?
Enter the provided WS-Fed query into the Okta System Log search bar to filter and calculate successful SSO authentications.
eventType eq "user.authentication.sso" and outcome.result eq "SUCCESS" and target.detailEntry.signOnModeType eq "SAML_1_1"How does Okta filter successful OIDC authentications?
Enter the provided OIDC query into the Okta System Log search bar to filter and calculate successful SSO authentications.
eventType eq "user.authentication.sso" and debugContext.debugData.signOnMode eq "OpenID Connect" and outcome.result eq "SUCCESS"
