ServicesPlatformEventsEvent typesApplication and user authentication

Application and user authentication

User authentication failed

Someone tried (and failed) to authenticate using an email from your organization.

{
    "timestamp": "2021-11-04T11:47:10.517Z",
    "alert": false,
    "description": "Failed authentication request from 'example@yourorg.com', Reason: Invalid password from IP 176.11.24.173, 45.196.240.161",
    "id": 13096831909,
    "event_type": {
        "id": 6,
        "description": "User authentication failed"
    },
    "event_source": {
        "id": 2,
        "description": "API"
    },
    "event_severity": {
        "id": 1,
        "description": "Warn"
    },
    "organisation": {
        "id": 5833,
        "name": "Test Org"
    },
    "user": {
        "id": 3492824,
        "name": "John Doe",
        "username": "example@yourorg.com"
    }
}
{
    "timestamp": "2021-11-04T11:49:32.141Z",
    "alert": false,
    "description": "Failed authentication request from 'example@yourorg.com', Reason: Invalid password. Too many failed authentication requests from IP 139.39.233.94, 32.7.85.228",
    "id": 975229042336,
    "event_type": {
        "id": 6,
        "description": "User authentication failed"
    },
    "event_source": {
        "id": 2,
        "description": "API"
    },
    "event_severity": {
        "id": 1,
        "description": "Warn"
    },
    "organisation": {
        "id": 2981,
        "name": "Test Org"
    },
    "user": {
        "id": 816899,
        "name": "John Doe",
        "username": "example@yourorg.com"
    }
}

Application authentication failed

Application token failed to authenticate.

Failed authentication request from 'Application Token Name', Reason: TokenStatus Revoked from IP 54.64.35.156

Support Access

emnify team accessed your Workspace on behalf of one of your users for service or support purposes.

{
    "timestamp": "2021-11-04T12:48:12.977Z",
    "alert": false,
    "description": "Support user max.mustermann@emnify.com of organisation emnify GmbH generated a support token for user example-user@test.com of organisation Test Org",
    "id": 136301313516,
    "event_type": {
        "id": 13,
        "description": "Support Access"
    },
    "event_source": {
        "id": 2,
        "description": "API"
    },
    "event_severity": {
        "id": 1,
        "description": "Warn"
    },
    "organisation": {
        "id": 4511,
        "name": "Test Org"
    },
    "user": {
        "id": 601841,
        "name": "John Doe",
        "username": "example-user@test.com"
    },
    "detail": {
        "support_username": "max.mustermann@emnify.com",
        "support_user_org": {
            "id": 2,
            "name": "emnify GmbH"
        },
        "target_username": "example-user@test.com"
    }
}

Multi-factor Authentication

User removed multi-factor authentication (MFA) from their account.

{
    "timestamp": "2021-11-04T12:51:40.100Z",
    "alert": false,
    "description": "MFA key with Id '717' of Type 'Time-Based One-Time Password' deleted for user 'user@test.com'",
    "id": 164681229500,
    "event_type": {
        "id": 14,
        "description": "Multi-factor Authentication"
    },
    "event_source": {
        "id": 2,
        "description": "API"
    },
    "event_severity": {
        "id": 0,
        "description": "Info"
    },
    "organisation": {
        "id": 5253,
        "name": "Test Org"
    },
    "user": {
        "id": 176257,
        "name": "John Doe",
        "username": "user@test.com"
    }
}