Select the User events tab to display the following details for each user event.
Time
The timestamp when the event occurred.
User ID
The PKI Hub internal identifier of the user associated with the event.
Event saved type
The type of saved event. See the table below for examples.
Each event is prefixed with 
on success and 
on error.
Event Type | Description |
|---|---|
| Client-initiated linking failed |
| Client initiated account linking to IdP |
| Client login failed |
| Service account (client credentials) login |
| Code-to-token exchange failed |
| Authorization code exchanged for token |
| Custom required action failed |
| Custom required action triggered |
| Account deletion failed |
| User account deleted |
| Action token execution failed |
| Action token executed |
| Required actions delivery failed |
| Required actions sent to user |
| Federated identity linking failed |
| Federated identity linked |
| Override failed |
| Existing federated identity link overridden |
| Consent grant failed |
| User granted consent to a client |
| First IdP login failed |
| First login via external IdP (triggers account creation/linking) |
| Account linking failed |
| Local account linked to IdP identity |
| IdP login failed |
| Login via external IdP initiated |
| Post-login processing failed |
| Post-login processing after IdP auth |
| Login attempt failed |
| User successfully logged in |
| Logout failed |
| User logged out |
| Self-registration failed |
| New user self-registered |
| Credential removal failed |
| Credential removed |
| Federated identity removal failed |
| Federated identity link removed |
| Password reset failed |
| Password reset completed |
| Authentication restart failed |
| Authentication flow restarted |
| Consent revocation failed |
| User revoked consent |
| Consent update failed |
| User updated consent |
| Credential update failed |
| Generic credential updated |
| Password change failed |
| User changed their password |
| Profile update failed |
| User profile updated |
| User permanently locked out (brute force) |
| User temporarily locked out (brute force) |
| Profile verification failed |
| Profile verification completed |
IP address
The IP address from which the event originated.
Client
The client application involved in the event.