Skip to main content

Audit

Open Settings → Audit → Security for sign-in and identity events. They include:

  • sign-ins, including SSO sign-ins with the provider used
  • failed SSO sign-ins, with the reason
  • owner recovery links requested and used
  • OAuth activity: authorizations, tokens issued and refused, MCP client registrations, connected and revoked upstream accounts
  • directory connections and syncs
  • people merged, and addresses added or removed

Every row records who, when, and from which IP address and user agent.