Event producers

IAM plugins can produce events that can be picked up and used, i.e., by event subscribers. For example, the plugin Airlock 2FA Token Controller produces an Airlock 2FA Device Deleted event in the Adminapp when an administrator deletes an end-user's Airlock 2FA device.

Functional limitation

Event producers are built-in and can neither be configured nor extended.

The following list shows what parts of IAM produce which events:

Event	Corresponding event type	Producer
Event	Corresponding event type	Module	Feature or plugin
`Airlock 2FA Device Activated`	`AIRLOCK_2FA_DEVICE_ACTIVATED`	Loginapp	Airlock 2FA Activation Step
`Airlock 2FA Device Deleted`	`AIRLOCK_2FA_DEVICE_DELETED`	Adminapp	Airlock 2FA Token Controller
`Airlock 2FA Device Deleted`	`AIRLOCK_2FA_DEVICE_DELETED`	Loginapp	Airlock 2FA Device Deletion Step
`Airlock 2FA Device In Cooldown Used`	`AIRLOCK_2FA_DEVICE_IN_ COOLDOWN_USED`	Loginapp	Airlock 2FA Authentication Step / Airlock 2FA Mobile Only Authentication Step / Airlock 2FA Usernameless Authentication Step / Airlock 2FA Self-Service Approval Step / Airlock 2FA Public Self-Service Approval Step / Airlock 2FA Transaction Approval Step
`Authentication Flow Successfully Completed`	`AUTHENTICATION_FLOW_ SUCCESSFULLY_COMPLETED`	Loginapp	Authentication Flow
`Authentication Method Changed`	`AUTHENTICATION_METHOD_CHANGED`	Adminapp	User Profile edit User Authentication Method REST API
`Authentication Method Changed`	`AUTHENTICATION_METHOD_CHANGED`	Loginapp	Complete Migration Step
`Context Data Changed`	`CONTEXT_DATA_CHANGED`	Adminapp	User Profile edit
`Context Data Changed`	`CONTEXT_DATA_CHANGED`	Loginapp	Apply User Data Edit Change
`Cronto Device Activated`	`CRONTO_DEVICE_ACTIVATED`	Loginapp	Cronto Activation Step
`Cronto Device Deleted`	`CRONTO_DEVICE_DELETED`	Adminapp	Cronto Token Controller
`Cronto Device Deleted`	`CRONTO_DEVICE_DELETED`	Loginapp	Apply Cronto Device Deletion
`Cronto Letter Ordered`	`CRONTO_LETTER_ORDERED`	Adminapp	Cronto Token Controller
`Cronto Letter Ordered`	`CRONTO_LETTER_ORDERED`	Loginapp	Cronto Letter Order Step
`Device Token Deleted`	`DEVICE_TOKEN_DELETED`	Adminapp	Generic Token Controller
`Device Token Deleted`	`DEVICE_TOKEN_DELETED`	Loginapp	Device Token Self-Service REST API
`Device Token Registered`	`DEVICE_TOKEN_REGISTERED`	Loginapp	Device Token Self-Service REST API
`Email Address Added`	`EMAIL_ADDRESS_ADDED`	Adminapp	User Profile edit (“Email User Profile Item”) Generic Token Controller (Token Model)
`Email Address Added`	`EMAIL_ADDRESS_ADDED`	Loginapp	Apply Email Change
`Email Address Changed`	`EMAIL_ADDRESS_CHANGED`	Adminapp	User Profile edit (“Email User Profile Item”) Generic Token Controller (Token Model)
`Email Address Changed`	`EMAIL_ADDRESS_CHANGED`	Loginapp	Apply Email Change
`Email Address Deleted`	`EMAIL_ADDRESS_DELETED`	Adminapp	User Profile edit (“Email User Profile Item”) Generic Token Controller (Token Model)
`Email Address Deleted`	`EMAIL_ADDRESS_DELETED`	Loginapp	Apply Email Change
`FIDO Credential Deleted`	`FIDO_CREDENTIAL_DELETED`	Adminapp	FIDO Token Controller
`FIDO Credential Registered`	`FIDO_CREDENTIAL_REGISTERED`	Loginapp	FIDO Registration Step
`Generic Step Result`	`GENERIC_STEP_RESULT`	Loginapp	Every flow step, see below
`Logged in from new Device`	`LOGIN_FROM_NEW_DEVICE`	Loginapp	Authentication Flow
`MTAN Token Deleted`	`MTAN_TOKEN_DELETED`	Adminapp	mTAN/SMS Token Controller
`MTAN Token Deleted`	`MTAN_TOKEN_DELETED`	Loginapp	Apply mTAN Deletion
`MTAN Token Phone Number Changed`	`MTAN_TOKEN_PHONE_NUMBER_CHANGED`	Adminapp	mTAN/SMS Token Controller
`MTAN Token Phone Number Changed`	`MTAN_TOKEN_PHONE_NUMBER_CHANGED`	Loginapp	Apply mTAN Edit Change
`MTAN Token Registered`	`MTAN_TOKEN_REGISTERED`	Adminapp	mTAN/SMS Token Controller
`MTAN Token Registered`	`MTAN_TOKEN_REGISTERED`	Loginapp	Apply mTAN Registration Change
`OATH OTP Secret Added`	`OATH_OTP_SECRET_ADDED`	Loginapp	OATH OTP Activation Step
`OATH OTP Secret Viewed`	`OATH_OTP_SECRET_VIEWED`	Loginapp	OATH OTP Activation Step
`Password Changed`	`PASSWORD_CHANGED`	Adminapp	Password Token Controller
`Password Changed`	`PASSWORD_CHANGED`	Loginapp	Password Change Self-Service Step Mandatory Password Change Step Password Reset Step
`Password Letter Ordered`	`PASSWORD_LETTER_ORDERED`	Adminapp	Password Token Controller
`Password Letter Ordered`	`PASSWORD_LETTER_ORDERED`	Loginapp	Password Letter Order Step
`User Created`	`USER_CREATED`	Adminapp	User Management
`User Created`	`USER_CREATED`	Loginapp	Loginapp REST Self-Registration
`User Deleted`	`USER_DELETED`	Adminapp	User Management
`User Deleted`	`USER_DELETED`	Service Container ^*)	Delete Users Task
`User Locked`	`USER_lOCKED`	Adminapp	User management Administrator management
		Loginapp	Failed Factor Attempts Counting Processor User Validity Processor User Persisting Step Lock Self-Service Step
		Service Container ^*)	Lock Inactive Accounts Task
`User Roles Changed`	`USER_ROLES_CHANGED`	Adminapp	Role management in the user profile
`User Unlocked`	`USER_UNlOCKED`	Adminapp	Unlock User Step
`User Unlocked`	`USER_UNlOCKED`	Loginapp	User Profile

*) The Service Container does not support regular Event subscribers. Events produced in the Service Container can only be processed as reliable events. See Reliable event delivery for more details.

The Generic Step Result is an event type that is produced by every flow step in the Loginapp. It provides the following attributes to the event subscriber: result type, next step, error code, and all additional attributes. When configuring a Generic Step Result plugin in the event subscriber, extensive filtering controls when a particular event subscriber should be executed.