Every event object carries a number of attributes that document various aspects of the event:
Event attributes | Description |
|---|---|
The core information provided by an event. | |
A unique identifier for the event. | |
Information on the event producer. | |
Information about the request that caused the event to be triggered. |
Event object data are the core information provided by an event. All end-user notification events have in common that they provide the username concerned by the event as well as additional information depending on the concrete use case. This could for example be a device ID, when an Airlock 2FA device is activated, or the reason why a user has been locked.
A full list of all events including their event data is listed below:
Event | Semantic | Event Data | ||
|---|---|---|---|---|
Information | Description | Example | ||
| User account was locked | Username | Username concerned by the event |
|
Lock reason | Reason why the user's account was locked |
| ||
| User completed an authentication flow | Username | Username concerned by the event |
|
Authentication Methods | List of authentication methods used during the authentication flow |
| ||
| User changes his or her password | Username | Username concerned by the event |
|
| User activated a new Airlock 2FA device | Username | Username concerned by the event |
|
Account ID | User's Airlock 2FA account ID |
| ||
Device ID | ID of activated Airlock 2FA device |
| ||
| An Airlock 2FA device was deleted | Username | Username concerned by the event |
|
Account ID | User's Airlock 2FA account ID |
| ||
Device ID | ID of deleted Airlock 2FA device |
| ||
| User activated a new Cronto device | Username | Username concerned by the event |
|
Device ID | ID of activated Cronto device |
| ||
| A Cronto device was deleted | Username | Username concerned by the event |
|
Device ID | ID of deleted Cronto device |
| ||
| User registered a new FIDO security key | Username | Username concerned by the event |
|
Relying Party ID | Configured identifier of the relying party |
| ||
Credential ID | Binary data (Base64url encoded) provided by the FIDO authenticator during registration |
| ||
| FIDO credential was deleted | Username | Username concerned by the event |
|
Internal Credential ID | Internal identifier of deleted FIDO credential |
| ||
| Mobile phone number was changed | Username | Username concerned by the event |
|
Number ID | Identifier for the registered mobile phone number |
| ||
previously registered modile phone number |
| |||
newly registered mobile phone number |
| |||
| User registered a new mobile phone number | Username | Username concerned by the event |
|
Number ID | Identifier for the registered mobile phone number |
| ||
| Mobile phone number was deleted | Username | Username concerned by the event |
|
Number ID | Identifier for the registered mobile phone number |
| ||
Every event provides information to uniquely identify a concrete instance.
Event identification data | ||
|---|---|---|
Information | Description | Example |
ID | Identifier which uniquely identifies this event |
|
Timestamp | Instant when the event was created |
|
Every event provides information about the source creating this particular instance. Depending on where the event originated from (e.g., Adminapp or Authentication Flow in the Loginapp), different information may be provided that we list below.
Note that every instance of an event has exactly one source.
Event source data | |||
|---|---|---|---|
Source | Information | Description | Example |
Adminapp | Administrator's username | Name of the administrator who produced the event |
|
Authentication Flow | Configuration Context | The configuration context in which this event was produced |
|
Application ID | Configured application ID for this authentication flow |
| |
Flow ID | ID of this authentication flow. For non-custom authentication flows, the value is always |
| |
Non-Authentication Flow (e.g., Protected Self-Service Flow) | Configuration Context | The configuration context in which this event was produced |
|
Flow ID | Configured identifier of this flow |
| |
Authentication Flow Step | Configuration Context | The configuration context in which this event was produced |
|
Application ID | Configured application ID for this authentication flow |
| |
Flow ID | ID of this authentication flow. For non-custom authentication flows, the value is always |
| |
Step ID | Identifier for this step if configured |
| |
Non-Authentication Flow Step | Configuration Context | The configuration context in which this event was produced |
|
Flow ID | Configured identifier of this flow |
| |
Step ID | Identifier for this step if configured |
| |
Every event provides information about the request leading to its creation.
Event Metadata | ||
|---|---|---|
Metadata Item | Description | Example |
User Agent | Raw value of the User-Agent request header |
|
Request IP | IP address of the request |
|