Logging successful authentication events in AD FS v3.0 RRS feed

  • Question

  • Hello, I am attempting to log successful authentication attempts in AD FS v3.0. I have tried to follow this guide here: http://www.agileit.com/news/configuring-adfs-servers-for-success-and-failure-auditing-of-user-logon-events/, but to no luck. I can see an authentication request in the logs, but I cannot see which user was authenticated. I am able to see failed login attempts. Any guidance on this? Thanks.
    Wednesday, December 16, 2015 4:11 AM


  • Make sure that Application Generated audit is enabled on the ADFS server itself as well for both Success and Failure. In GPEDIT.MSC (or via GPO):

    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

    Wednesday, December 16, 2015 1:56 PM