ADFS auditing and reporting with ADAudit Plus

Microsoft Active Directory Federation Services (ADFS) helps organizations provide users with single sign-on (SSO) capabilities, making it easier for them to access systems and applications across organizational boundaries.This claims-based access control authorization model allows organizations to share identity information with trusted business partners.

ADAudit Plus fetches all authentication attempts recorded by ADFS in the security event log and provides insightful reports on ADFS success and ADFS failure. ADFS auditing keeps administrators informed about trends in user activity and also helps organizations meet compliance standards. With ADAudit Plus, you can view claims issued by ADFS and generate ADFS-specific audit reports within a defined audit interval.

Logon Success

Issued Claims

Caller Identity

Logon Failure

ADAudit Plus' ADFS reporting tool enables you to:

• Examine heaps of security logs using state-of-the-art parsing technology, including quick search and filter options, to pull up user specifics including IP address, relying party, and logon time information.
• Enhance security with alerts on brute force attacks, and stay ahead of intruders by triggering actions from a custom rule set.
• Generate ADFS-specific audit reports that simplify security analysis by reducing the amount of time, effort, and expertise required.
• Forward audit information directly to your SIEM solution or to a syslog server in the appropriate data format.