> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/admin-user-guide/governance-and-reporting/reports-and-audit-logs.md).

# Reports and Audit logs

Reports is where SECUREpass hands back everything it has recorded — who signed in, what they authenticated with, what access they hold, what failed, and the evidence an auditor will ask for. Nothing here changes the system; every page is a read of what already happened.

## Opening Reports

{% stepper %}
{% step %}

## Select Reports

Select **Reports** in the left navigation.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/Dp8FZ7eCiTEJY7E4XkU1/assets/01.png)
{% endstep %}

{% step %}

## Choose a tab and report

Reports are grouped into seven tabs across the top — **User & Authentication**, **Access Management**, **User Activity & Self-Service**, **System & Performance**, **Security, Compliance & Audit**, **Scheduler** and **PAM**.

Selecting a tab shows the cards belonging to it, and selecting a card opens the report itself.
{% endstep %}
{% endstepper %}

### Controls shared by every report

Every report opens on the same layout, so once you can read one you can read all of them.

| Control        | What it does                                                                 |
| -------------- | ---------------------------------------------------------------------------- |
| Search         | Free-text search across the report                                           |
| Filters        | Narrows what the report returns. The badge shows how many filters are active |
| Export         | Downloads the report exactly as it is currently filtered                     |
| Column headers | Sort ascending or descending                                                 |
| Records count  | How many rows the report holds in total                                      |
| Pagination     | Pages through them, ten to a page by default                                 |

{% hint style="info" %}
Check the **Filters** badge before you read a report or export it. A filter left on from an earlier look quietly changes what you are seeing, and the row count along with it.
{% endhint %}

***

## User & Authentication

Sign-in activity — who tried to authenticate, with what, and how it went.

### Login Attempts

Every login attempt made against the platform, with the date it was made and whether it succeeded.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/jCAobhe12foy3EaZq1dC/assets/02.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/YSh7T7EnhXMTJds9ifSB/assets/03.png)

### Authentication Mode Usage

Which authentication methods people actually use, counted across authentication events.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/BeDJoUy1JmHz5JY8SNWp/assets/04.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/j0265Nw1UdJ7QGPA2WBg/assets/05.png)

### MFA Challenges

Every multi-factor verification the platform issued, and whether it passed or failed.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/wiTO4zZjsXZnnFgcFtKB/assets/06.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/I1i3gO4DdmfI1P3gadoA/assets/07.png)

### User Lifecycle

Accounts with their creation and update history — when each was created, and every change made to it since.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/Ctgfy6HonpBEpTxgbjAd/assets/08.png)

***

## Access Management

What access exists, and who holds it.

### Resource Access

Resource access events across the connected applications, with the settings each one runs under.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/IfDFbS3b0apgRneEQiM7/assets/09.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/xVnBnWTBrPxVPReHFTc5/assets/10.png)

### Access controls per department

Access controls grouped by department. This is the quickest way to spot a department carrying more access than its work needs.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/pkAfTh43h47p1zutSYbc/assets/11.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/aXcczLUii8ZhP2eLSRxG/assets/12.png)

### Access controls per application

Access controls for each application, with its SSO type, the roles attached to it, who created and last modified it, and whether it is active.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/Gneez3Rz95yBX6rSOpiy/assets/15.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/SaIVUmkVjyNaa5lp8SOl/assets/16.png)

***

## User Activity & Self-Service

What users and administrators did — day-to-day activity, self-service actions, and the admin audit trail.

### User Status

Every user in the system, with their current status.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/JLyGgb0Igvj6BUR7TeNK/assets/17.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/cdNMAOHtaxwKyZDb52gO/assets/18.png)

### Password Resets

Password reset events, self-service and administrative alike.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/MhpHpyrAb3EPdX3jyIsJ/assets/19.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/9KnsGYM4YgnB2tg5CG2V/assets/20.png)

### Audit Logs

Actions taken by administrator accounts, recorded as they happen.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/46zRgGpBhvDCAcHSCbwZ/assets/21.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/nQuLYRVZyZ2jTWiX1cis/assets/22.png)

### DSC Authentication Details

Every DSC-based authentication event, with the signed-data detail behind each row.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/XeC5iK9b9bxiNxeLKE5G/assets/23.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/NeMFEPG7eljtrkQ0op34/assets/24.png)

### User Login Events

Login history per user — the application, the date, the event, its result and the IP address it came from.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/rX0Meo8BRmAktH04Vq5h/assets/25.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/QtjuzZ4olOAZeLhEULK8/assets/26.png)

### Users per Department

Users grouped by the department they belong to.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/5jMibQmi3Ct6jGDISNCy/assets/27.png)

### Application Reports

The applications registered on the platform, with the reports held against each.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/D8DDqUboTue5xNXSg1y1/assets/28.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/40qHyMC1xGPNoVDSdJ47/assets/29.png)

### Group Reports

Groups with their members.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/6fvE0zJTzWftOpLWHzSf/assets/30.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/Bbg1xyq9dCy0PBa0Ter8/assets/31.png)

### Device Insights

The devices people sign in from — device type, the event, its result and status.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/MR3rhB6B9zez9WCQ6dff/assets/32.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/ZS7Mn0TNypXYfSii4j4J/assets/33.png)

***

## System & Performance

How the platform itself is behaving.

### API Calls

Every API call made to the platform.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/DTNNg0Z5HvheAfVnKIE6/assets/34.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/KAQX4GVeaJts7XrjeEaE/assets/35.png)

### Authentication API Latency

Response times for the authentication APIs — the number to watch when sign-in feels slow.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/R2VC2qchVfByLv90kDxi/assets/36.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/2wSfNUTMj0aWj8Bxeu64/assets/37.png)

***

## Security, Compliance & Audit

The reports an audit or an incident review starts from.

### Compliance Violations

Failed events flagged as compliance issues.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/OxLljsly05d7JWAKan4J/assets/38.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/o5sy4VSOGhjxk0jsN8H0/assets/39.png)

### Failed Events

Every audit log event that ended in failure. On a normal day this is where a problem surfaces first.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/fGUoAWkapd9sq6cKnTT7/assets/40.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/qEnLIbHjaIh5kZmP8ojK/assets/41.png)

### MFA Audit Logs

The full multi-factor authentication audit trail — user, service, event, result, date, IP address, device and operating system.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/8Q9Mg9XOnGeabSJY6zAC/assets/42.png)

Selecting the card opens the report.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/rY7n6auM17DE3CJL7YMQ/assets/44.png)

***

## PAM

### PAM Session Reports

Privileged session history, recordings and audit trail. The same material is reachable from **Privileged Access → Session management and recording**.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/xzM3CNZsDAkeA4KauyjX/assets/43.png)

***

## Exporting

Every report carries an **Export** button. Use it when the report has to leave the platform — an audit pack, a compliance submission, or evidence attached to a ticket.

Export respects the search and filters currently applied, so what downloads is what you are looking at rather than the whole report. Set the filters first, confirm the record count, then export.

{% hint style="warning" %}
An exported report is a file of identity data sitting outside SECUREpass's access controls. Treat it as sensitive: send it through a channel that suits its contents, and delete it once whatever needed it is finished.
{% endhint %}