✖

- Related Products
- ADManager Plus

  Active Directory Management & Reporting

  Download | Demo
- ADAudit Plus

  Real-time Active Directory Auditing and UBA

  Download | Demo
- EventLog Analyzer

  Real-time Log Analysis & Reporting

  Download | Demo
- Exchange Reporter Plus

  Exchange Server Auditing & Reporting

  Download | Demo
- AD360

  Integrated Identity & Access Management

  Download | Demo
- Log360

  Comprehensive SIEM and UEBA

  Download | Demo

# User Attempts Audit Report:

This report generates the list of users who have attempted authentication methods like MFA, SAML and NTML authentication, smart card login, or authentication into the self-service portal. Information displayed in the report includes the time of the attempt, domain name, total number of attempts, and type of attempt.

### Report filtering and generation:

- Use the Period drop-down to filter results based on time period. Options include Today, Yesterday, Last 7 days, Last 30 days, This month, and Custom Period.
- Click Generate to generate the report.
- Advanced Filtering: Once the report is generated, the entries can be filtered based on the following parameters by clicking the Advanced Filter icon:

- Domain Name
- User Name
- Type of user attempts:

- Attempt to authenticate using any of the 15 multi-factor authentication methods supported by ADSelfService Plus
- Type of Login:

- Manual login: Manual login attempts into ADSelfService Plus
- NTLM login: Login attempts of users using NTLM SSO
- IdP-initiated SAML login: Login attempts into ADSelfService Plus initiated from the SAML identity provider portal
- SP-initiated SAML login: Login attempts of users who will be redirected to the SAML identity provider when they try to log in to ADSelfService Plus. After successful authentication in the identity provider, they will be able to access the product.
- SSO-enabled applications login: Login attempts of users into enterprise applications using SAML SSO login
- Smart card login: Login attempts of users opting for smart card based SSO

- Endpoint MFA activity in Windows, macOS, or Linux logins
- Password reset or account unlock attempts

- Status of the user attempt: Success or failure

- Sorting: Click any of the columns except the Status column to view the report's entries in ascending or descending order.

### Searching:

- Click the search icon [ ] to search for specific data in the columns displayed.
- Search for a particular user using User Name, Domain Name, and Attempted From.
- Search will take place with the criteria contains. For example, if the User Name field is searched with the keyword jack, all usernames that contain jack will be displayed.

### Export and More:

- The Export As option in the right corner of the page helps export the report in various formats like CSV, CSVDE, HTML, PDF, and XLS.
- The More option in the right corner of the page lists the Printable View, Send Mail, and Export Settings options.

- The Printable View option can be used to preview the report.
- The Send Mail option can be used to email the report to the desired email addresses.
- The Export Settings option allows users to customize the description and logo that will be used in the exported report. Also, admins can opt to keep the logo on every page of the exported report.

## Thanks!

Your request has been submitted to the ADSelfService Plus technical support team. Our technical support people will assist you at the earliest.

#### Need technical assistance?

- Enter your email ID
- Talk to experts

- By clicking 'Talk to experts', you agree to processing of personal data according to the Privacy Policy.

Copyright © 2021, ZOHO Corp. All Rights Reserved.