The authentications page allows you to generate reports on authentications against the IdP and apply a variety of filters against your data set generated over specific dates ranges.
In the top left hand corner you will see a “Download CSV” button which will allow you to download your report to a CSV file once filters have been applied to the report. This CSV can then be opened in any common spreadsheet software such as Excel and can be used to produce your own reports for senior management.
In order to generate a report we need to provide a date range to run the report over. This can be done by clicking the date input field in the top right hand corner. The date/time selector has some handy preset date ranges built in such as the last week, this month, this year. You can also define a custom date range by selecting a start date and end date using the calendars displayed on the right hand side of the date presets.
The authentications graph displayed before the filters changes depending on the date range selected, so authentication statistics from “Today” will be broken down into hours as opposed to “This month” being broken down into days, and “This year” broken down into months and so on.
The authentication data is displayed in both a visual graph and tabular data. As with all graphs in the dashboard software it’s possible to hover over a point in the graph to display the number of authentications and unique logins for that point. You can also choose to display or remove data from the graph by clicking on the coloured legend above the graph.
There are a number of filters above the graph which which can be used in combination with each other to provide extremely targeted reports.
Filter by service provider
This filter allows you to see authentications to a specific or collection of SP’s. Simply start typing the SP’s friendly name or entity ID into the input box, or choose from the drop down list of SPs displayed when the input box has been chosen. Choose as many SP’s as you wish to display data for in your report. SP’s are automatically added to this list as they are aggregated from the IdP’s log files.
If you don’t see a specific SP displayed in the list it’s likely because there have been no authentications to that SP recorded in the logs.
You can remove SPs from the filter by clicking the back space button.
Filter by auth type
This allows you to see the authentication type of the users signing in. So it would be possible to select “Kerberos” from the filter to see how many users are logging in on site using SSO, or how many are authenticating offsite using username/password. Simply click the checkbox next to the item(s) you wish to use for the report.
Filter by attributes sent
This filter will allow you to filter by specific attributes that have been released to SPs. The filter will allow you to see how many authentications have released a certain attribute such as sAMAccountName or email address.
Filter by profiles
This filter allows you to filter between SAML1 and SAML2 authentications so you can see how many authentications are happening over SAML1 and SAML2 respectively. You should hopefully only see a small number of SAML1 authentications as this protocol is becoming deprecated by SP’s in favour of SAML2.
Filter by users
This filter will initially be greyed out and must be enabled by clicking “enable” before you can use this. When the feature is enabled this will be logged in the dashboard logs so you can see who has enabled this feature.
Once the filter is enabled it gives you the ability to view authentications for a specific user or users.
In order to filter by username once the feature has been enabled simply type the user’s username into the input box (multiple usernames can be filtered on by typing additional usernames with a comma separator).
Filter by groups
This filter allows you to search for authentications performed for a specific Active Directory group. These groups will be automatically aggregated from Active Directory itself once you define the “groups” attribute in https://www.overtsoftware.com/dashboard-docs/statistics-settings/ (typically memberOf).
Simply choose a group or groups from the drop down list or start typing to search for a specific group you want to filter on.
The filter will allow you to see authentications/usage for specific AD groups such as students/staff/external users etc.
Now you have an understanding of the filters it’s possible for you to use these to create specific reports such as “I want to see the number of authentications carried out by members of the Staff group to the Google service provider between July and September this year”.