Skip to main content
Solved

Who tried failed login?

  • June 19, 2025
  • 3 replies
  • 46 views

laurensdelfland
Contributor
Forum|alt.badge.img+6

We use Azure Entra ID (formerly known as Azure Active Directory) with FME Flow to login the application.

So now we have two methods: 
1. user name and password
2. button "Sign in with Microsoft"

My colleagues often use the first method, which does not work for them.

I set up the system events to notify me when a login is failed. But now I would like to know who tried and failed to login. Is there a log that shows the username someone used to try to login? Does anyone know which logfile it is in?


ps it would be nice if I could hide the first login method. But that method is used by the admin-account. So I guess that is not an option.

Best answer by ebygomm

System Events should show you the username of the person who tried to login?

 

This post is closed to further activity.
It may be an old question, an answered question, an implemented idea, or a notification-only post.
Please check post dates before relying on any information in a question or answer.
For follow-up or related questions, please post a new question or idea.
If there is a genuine update to be made, please contact us and request that the post is reopened.

3 replies

alexbiz
Influencer
Forum|alt.badge.img+28
  • Influencer
  • 161 replies
  • June 19, 2025

Here is an exemple of an automation event :

{
  "automation.id": "13806e84-dbf2-441a-ab05-5309ec4569c2",
  "systemEvent.description": "Triggered whenever a user failed to login to the web interface.",
  "source": "system-event",
  "time": "2025-06-19T16:14:04+02:00",
  "message": "Failed login by user wronguser due to insufficient credentials.",
  "event.id": "b42409a4-d811-42a4-a631-4c1cff54af94",
  "user": "wronguser",
  "automation.name": "Untitledsdf",
  "systemEvent.title": "Login Failed"
}

 

You can get the message as well as the user from that event, and use them as input for workspace parameters :



Or directly use them in your email action : 


 


ebygomm
Influencer
Forum|alt.badge.img+44
  • Influencer
  • 3434 replies
  • Best Answer
  • June 19, 2025

System Events should show you the username of the person who tried to login?

 


laurensdelfland
Contributor
Forum|alt.badge.img+6
  • Author
  • Contributor
  • 9 replies
  • June 25, 2025

Thank you both (@ebygomm & @alexbiz) for the very useful responses! 

I just tested some things and yes, the username does appear in the System Events! 

Apparently I have users that just click the Log In-button, without even entering a username. An event is logged, but understandably without a username. I guess that sort of confused me and lead me to believe the username was not logged at all or maybe only in an obscure log somewhere.