<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00007ua1YeCAIOkta Classic EngineSingle Sign-OnAnswered2024-03-25T11:35:49.000Z2022-08-13T05:40:08.000Z2022-08-15T17:33:45.000Z

2fxsr (2fxsr) asked a question.

Obtain logs on unsuccessful sign on with the relayState

Hi,

 

In an application if a user has a choice to choose SSO and when choosing SSO they get redirected to an Okta page where they enter their credentials. Okta has given us an option to use the relayState that would be part of this redirect link to Okta. So when a user gets redirected and they sign in successfully, we get a response back from Okta with the relayState which gives us information on who the user was that successfully signed in. But in the case the user didn't sign in successfully or even got locked out the application doesn't know this and even if we set up event hooks, the post messages we would get from Okta doesn't have the relayState as far as I know. I was wondering if there was a way to get some kind of log from Okta with the relayState when a user gets locked or wasn't able to sign in successfully? Thanks!


  • Hi @2fxsr (2fxsr)​ , Thank you for reaching out to the Okta Community!

     

    If the authentication assertion passed successfully but the flow fails on the app side for whatever reason (for example a misconfiguration), the even would be logged on the app side. Okta logs would just show as a "success". 

    If the user successfully provides the Okta credentials, they'll just be redirected to the app and there would be no validation. (see example logs below)

    Event Info 

     

    I'm not sure if what you are looking for can be done as this falls more on the service provider (app), but you can suggest a reporting enhancement on the Okta Community page by going to the Community Ideas tab. Features suggested in our community are reviewed and can be voted and commented on by other members. High popularity will increase the likelihood of it being picked up by the Product Team and it being implemented. 

    More details here: 

    https://support.okta.com/help/s/blog/a674z000001cj7YAAQ/okta-ideas-faq?language=en_US

     

     

    If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you. 

     

    Hope my answer helps! 

    --------------------------------

    The Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.

    Expand Post
    Selected as Best
  • Hi @2fxsr (2fxsr)​ , Thank you for reaching out to the Okta Community!

     

    If the authentication assertion passed successfully but the flow fails on the app side for whatever reason (for example a misconfiguration), the even would be logged on the app side. Okta logs would just show as a "success". 

    If the user successfully provides the Okta credentials, they'll just be redirected to the app and there would be no validation. (see example logs below)

    Event Info 

     

    I'm not sure if what you are looking for can be done as this falls more on the service provider (app), but you can suggest a reporting enhancement on the Okta Community page by going to the Community Ideas tab. Features suggested in our community are reviewed and can be voted and commented on by other members. High popularity will increase the likelihood of it being picked up by the Product Team and it being implemented. 

    More details here: 

    https://support.okta.com/help/s/blog/a674z000001cj7YAAQ/okta-ideas-faq?language=en_US

     

     

    If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you. 

     

    Hope my answer helps! 

    --------------------------------

    The Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.

    Expand Post
    Selected as Best
    • 2fxsr (2fxsr)

      Thank you! Is there any way we can add service provider (app) tag for this question or would I need to create a new question?

      • Happy to help!

        The tag would have to be selected on creation for a question.

         

        Regards.

This question is closed.
Loading
Obtain logs on unsuccessful sign on with the relayState