Return
-
Title
Is It Possible to Track "Last login" of a System Account? -
Description
Is it possible to track last login for a system account into One Identity Manager? -
Resolution
To enable logging, open Designer and activate the configuration parameter "Common\Journal\LoginAudit". Once enabled, Identity Manager writes information in the system journal (table DialogJournal).
Login succeeded for module Active Directory user account, properties: , identity: username, client machine: MACHINENAME
The system writes this information into the DialogJournal table after a successful login.If additional logging is required, a custom database trigger for INSERTs in DialogJournal will need to be created, but is not supported. Such a trigger can be used to write some additional information or fire another event. -
Additional Information
While the field DialogUser.LastLogin exists, this is used only for dynamic users. These users will be created automatically for role-based authentications. To delete the not-used users automatically the LastLogin can be used.