Access Management 2.0 Event Logging

Introduction

This page provides a comprehensive overview of Access Management 2.0’s User and Administrative Event Logging capabilities, explaining how authentication activities and privileged administrative actions are captured, processed, and stored within the platform.

Access Management 2.0 provides built-in auditing for two distinct categories of security-relevant events:

User Events (Authentication & User Activity)

What User Events Capture

User events record end-user security activity, including:

• LOGIN (successful authentication)
• LOGOUT
• LOGIN_ERROR (failed login)
• UPDATE_PASSWORD
• RESET_PASSWORD
• TOKEN_REFRESH (depending on configuration)

Admin Events (Administrative & Configuration Changes)

What Admin Events Capture

Admin events record privileged actions, including:

• User creation, updates, deletion
• Role and role-mapping changes
• Client creation, updates, deletion
• Client scope changes
• Identity Provider (IdP) creation and updates
• Realm configuration changes

How an Administrator Enables Event Logging

1. Login to Access Management 2.0 Administration Console as an Administrator
2. Choose the appropriate realm → maactive

Click on Realm Settings

Click on the Events Tab

Enable Events at the Realm Level

In Admin Console → Realm Settings → Events:

• Enable User Events

Enable User Events and Set Persistence

Event Types Captures for a User

• Enable Admin Events

Click on the Admin Events tab

Enable Save Events and Include Representation

Database Tables Used for Event Storage

Access Management 2.0 stores events in dedicated audit tables when persistence is enabled.

User Events Table

EVENT_ENTITY

Stores one row per user event.

Admin Events Table

ADMIN_EVENT_ENTITY

Stores one row per admin event.