Compliance reports

This section describes the compliance class of reports:

Auth Node Change Log	Authentication History - Chronological Descending	Authentication Metrics	Enrollment - History
Operator Activity - Detail	Operator Activity - Logons	Operators (Internal) with Static Passwords	Users - All - with Tokens and Tasks
Users - Inactive	Users - Locked Tokens	Users - Never Authenticated	Users - No Authentication Method
Users - with Static Passwords	Users - with Tokens

Auth Node Change Log

Description:
Reports all Auth Nodes, configuration and status.

Filters:
Node Name
Date Range:

• Start Date
• End Date
• Current Month
• Last X Months (value: 1 - 12), default = 1

Fields in Report	Returns
Modified Date	Value: yyyy/mm/dd hh:mm:ss xM  (AM or PM)
Modified By	String
Node Name	String
Resource Name	String
Host Name	String
Low IP Address in Range	String
High IP Address in Range	String
Allow account lookup based on user name	Value: No, Yes
Disable PIN change request	Value: No, Yes
Enabled Realm Authentication	Value: No, Yes
Parse Mode	Value: First Found, Last Found
Realm Identifier	String
Remove Realm Suffix	Value: No, Yes
Use as RADIUS Node	Value: No, Yes

Authentication History - Chronological Descending

Description:
Reports authentication history in chronological order.

Filters:
User Name
Result:

• All
• Failure
• Success
• Server PIN Provided
• User PIN Change
• Outer Window Authentication
• Change Static Password
• Password change failed
• PIN change failed
• Push OTP Rejected
• Push OTP Dsipatched
• Skipped

Date Range:

• Start Date
• End Date
• Current Month
• Last X Months (value: 1 - 12), default = 1

Fields in Report	Returns
TimeStamp	Value: yyyy/mm/dd hh:mm:ss xM (AM or PM)
User ID	String
User Name	String
First Name	String
Last Name	String
Source IP	String
Agent	String
Token	String
Action	String
Result	String
Credential Type	String
Message	String

Authentication Metrics

Description:
This report is equivalent to snapshot metrics.

Filters:
n/a

Fields in Report	Returns
Account Name	Integer
Today Pass	Integer
Today Fail	Integer
Today Total	Integer
Week-to-Date Pass	Integer
Week-to-Date Fail	Integer
Week-to-Date Total	Integer
Month-to-Date Pass	Integer
Month-to-Date Fail	Integer
Month-to-Date Total	Integer
Year-to-Date Pass	Integer
Year-to-Date Fail	Integer
Year-to-Date Total	Integer

Enrollment - History

Description:
Reports detail and status of all self-enrollments.

Filters:
State:

• All
• Not Initialized
• Inventory
• Assigned
• Active
• PIN Change
• Lost
• Faulty

Date Range:

• Start Date
• End Date
• Current Month
• Last X Months (value: 1 - 12), default = 1

Fields in Report	Returns
Provisioning Task	String
Start Date	Value: yyyy/mm/dd hh:mm:ss xM (AM or PM)
End Date	Value: yyyy/mm/dd hh:mm:ss xM (AM or PM)
User ID	String
Last Name	String
First Name	String
State	Value: 0 - Enrollment Pending and within the provisioning period 2 - Provisioning task and Enrollment link expired 4 - Successful Enrollment
Serial Number	String
Completed Date	Value: yyyy/mm/dd hh:mm:ss xM (AM or PM)
Deployed To	String

Operator Activity - Detail

Description:
Reports operator activity, actions, and results.

Filters:
User ID
Type:

• All (default)
• Internal
• External

Date Range:

• Start Date
• End Date
• Current Month
• Last X Months (value: 1 - 12), default = 1

Fields in Report	Returns
Action Date	Value: yyyy/mm/dd hh:mm:ss xM  (AM or PM)
User ID	String
Type	String
Action Class	String
Action Type	String
Result	String
Action Details	String

Operator Activity - Logons

Description:
Reports operator logons in a date range.

Filters:
User ID
Date Range:

• Start Date
• End Date
• Current Month
• Last X Months (value: 1 - 12), default = 1

Fields in Report	Returns
Timestamp	Value: yyyy/mm/dd hh:mm:ss xM  (AM or PM)
User ID	String
Logon ID	String
Source IP	String
Serial Number	String
Result	String
Message	String

Operators (Internal) with Static Passwords

Description:
Reports operators with static password credentials.

Filters:
n/a

Fields in Report	Returns
User ID	String
Logon ID	String
Last Name	String
First Name	String
Status	String

Users - All - with Tokens and Tasks

Description:
Reports users with their assigned authentication methods and active, locked or expired provisioning tasks.

Filters:
Group Name

Fields in Report	Returns
User ID	String
Last Name	String
First Name	String
Serial Number	String
Task ID	Integer
Email	String
Mobile Phone	String
City	String
State	String
Country	String
Postal/Zip	String
Phone	String
Extension	String
Custom Field 1	String
Custom Field 2	String
Custom Field 3	String
Alias 1	String
Alias 2	String
Alias 3	String
Alias 4	String
Auth Method	String
Auth State	String
Token Type	String
Token State	String
Target	String
Device Type	String
Push OTP	String
Last Auth Date	Value: yyyy/mm/dd hh:mm:ss xM  (AM or PM)
Provisioning Type	String
Task Status	String

Users - Inactive

Description:
Reports users that have not authenticated for N days.

Filters:
Days

Fields in Report	Returns
User ID	String
Last Name	String
First Name	String
Method	String
Serial Number	String
Day	String

Users - Locked Tokens

Description:
Reports users with locked passwords and tokens.

Filters:
n/a

Fields in Report	Returns
User ID	String
Last Name	String
First Name	String
Date	Value: yyyy/mm/dd hh:mm:ss xM  (AM or PM)
Modified by	String

Users - Never Authenticated

Description:
Reports users that have not authenticated.

Filters:
n/a

Fields in Report	Returns
User ID	String
Last Name	String
First Name	String

Users - No Authentication Method

Description:
Reports users with no assigned authentication method.

Filters:
n/a

Fields in Report	Returns
User ID	String
Last Name	String
First Name	String

Users - With Static Passwords

Description:
Reports users able to authenticate with a static password.

Filters:
Method:

• All (default)
• IntPWD
• ExtPWD

Fields in Report	Returns
User ID	String
Last Name	String
First Name	String
Type	String

Users - With Tokens

Description:
Reports users with assigned authentication method, excluding passwords.

Filters:
Product:

• All (default)
• KT
• RB
• MP
• LEGACY
• SMS
• OATH
• Custom
• GOLD
• eToken
• MobilePASS
• GoogleAuthenticator
• GrIDsure
• SecurID
• SecurID-VF
• RADIUS

Fields in Report	Returns
User ID	String
Last Name	String
First Name	String
Mobile Phone	String
City	String
State	String
Country	String
Custom Field 1	String
Custom Field 2	String
Custom Field 3	String
Serial Number	String
Token State	String
Target	String
Device Type	String
Push OTP	String
Last Auth Date	Value: yyyy/mm/dd hh:mm:ss xM  (AM or PM)