Search all events for non-OPC SAML app access success
GET {{HOST}}/admin/v1/AuditEvents?filter=eventId eq "sso.app.access.success" and ssoApplicationType ne "NONOPC:SAML"
This example demonstrates how to search for non-OPC SAML apps accessed by users.
Request Params
| Key | Datatype | Required | Description |
|---|---|---|---|
filter | string |
HEADERS
| Key | Datatype | Required | Description |
|---|---|---|---|
Authorization | string | ||
Content-Type | string |
RESPONSES
status: OK
{"schemas":["urn:ietf:params:scim:api:messages:2.0:ListResponse"],"totalResults":2,"Resources":[{"idcsCreatedBy":{"type":"User","display":"admin@oracle.com","value":"98296b6bd077438a9fe368128fd2faac","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Users/98296b6bd077438a9fe368128fd2faac"},"actorName":"admin@oracle.com","id":"f96893a678404c89b944c8f324a23228","ssoLocalIp":"172.xx.x.xx","ssoApplicationId":"c4b20a6b16e24fec9e3e18322c997297","actorDisplayName":"admin@oracle.com","ssoRp":"Demo","meta":{"created":"2019-03-14T08:47:30.409Z","lastModified":"2019-03-14T08:47:30.409Z","resourceType":"AuditEvent","location":"https://bravoe.identity.internal.oracle.com/admin/v1/AuditEvents/f96893a678404c89b944c8f324a23228"},"rId":"0:1:1","actorId":"98296b6bd077438a9fe368128fd2faac","ssoIdentityProvider":"localIDP","timestamp":"2019-03-14T08:47:21.287Z","idcsLastModifiedBy":{"value":"98296b6bd077438a9fe368128fd2faac","display":"admin@oracle.com","type":"User","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Users/98296b6bd077438a9fe368128fd2faac"},"clientId":"5ac7663aeb324257a6e3dad047af00ba","quotaCount":0,"ssoPolicyObligations":"effect:ALLOW,authenticationFactor:IDP,allowUserToSkip2FAEnrolment:false,2FAFrequency:SESSION,reAuthenticate:false,trustedDevice2FAFrequency:","ecId":"Ssf2T0y1000000000","clientIp":"10.191.xxx.xx","ssoComments":"App access success","eventId":"sso.app.access.success","ssoApplicationName":"Demo","ssoAuthnLevel":0,"ssoUserAgent":"PostmanRuntime/7.6.0","ssoApplicationType":"NONOPC:OIDC","meterAsOPCService":false,"actorType":"User","serviceName":"SSO","message":"App access success","schemas":["urn:ietf:params:scim:schemas:oracle:idcs:AuditEvent"]},{"idcsCreatedBy":{"type":"User","display":"admin@oracle.com","value":"98296b6bd077438a9fe368128fd2faac","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Users/98296b6bd077438a9fe368128fd2faac"},"actorName":"admin@oracle.com","id":"983d7b7b68f74f28ae72b9b862580f7b","ssoLocalIp":"172.xx.x.xx","ssoApplicationId":"c4b20a6b16e24fec9e3e18322c997297","actorDisplayName":"admin@oracle.com","ssoRp":"Demo","meta":{"created":"2019-03-19T13:18:00.693Z","lastModified":"2019-03-19T13:18:00.693Z","resourceType":"AuditEvent","location":"https://bravoe.identity.internal.oracle.com/admin/v1/AuditEvents/983d7b7b68f74f28ae72b9b862580f7b"},"rId":"0:1:1","actorId":"98296b6bd077438a9fe368128fd2faac","ssoIdentityProvider":"localIDP","timestamp":"2019-03-19T13:17:48.479Z","idcsLastModifiedBy":{"value":"98296b6bd077438a9fe368128fd2faac","display":"admin@oracle.com","type":"User","$ref":"https://bravoe.identity.internal.oracle.com/admin/v1/Users/98296b6bd077438a9fe368128fd2faac"},"clientId":"5ac7663aeb324257a6e3dad047af00ba","quotaCount":0,"ssoPolicyObligations":"effect:ALLOW,authenticationFactor:IDP,allowUserToSkip2FAEnrolment:false,2FAFrequency:SESSION,reAuthenticate:false,trustedDevice2FAFrequency:","ecId":"Ssf2T085000000000","clientIp":"10.191.xxx.xx","ssoComments":"App access success","eventId":"sso.app.access.success","ssoApplicationName":"Demo","ssoAuthnLevel":0,"ssoUserAgent":"PostmanRuntime/7.6.1","ssoApplicationType":"NONOPC:OIDC","meterAsOPCService":false,"actorType":"User","serviceName":"SSO","message":"App access success","schemas":["urn:ietf:params:scim:schemas:oracle:idcs:AuditEvent"]}],"startIndex":1,"itemsPerPage":50}