Authentication Summary dashboard
The Authentication Summary dashboard displays authentication activity and system health with hourly data updates. Use it to understand login patterns, track MFA adoption, review geographic distribution, monitor authentication method adoption (SMS, MFA, passwordless), and ensure authentication infrastructure is performing properly.
For risk engine analyzer scores, users and IPs with low LoA scores, and credential stuffing detection, see Risk Intelligence.
System Health Overview
These summary cards show overall authentication system performance at a glance.
What it measures: Total authentication requests, successful and failed login rates, number of active users, and average Level of Assurance (LOA) score across all authentications.
Why it matters: Identifies when authentication services are degraded or experiencing issues that affect user login experience.
When to check: During peak usage times, after policy changes, or when users report login problems.
Geographical Login Distribution
This map shows which countries users are logging in from.
What it shows: A world map showing where users are logging in from. Blue dots mark login locations, and you can click on any region to see how many logins succeeded or failed from that location.
Why it matters: Helps you understand your user base geographic distribution and identify unusual login locations that might indicate account compromise or policy violations.
When to check: As part of regular security reviews, or when investigating suspicious login activity.
Authentication Breakdown
This chart shows how users log in, grouped by the Identity provider filter at the top of the dashboard.
What it shows: Horizontal bars that count logins:
- With no identity provider selected, successful and incomplete logins for each identity provider. Select a provider's name to open its configuration.
- With an identity provider selected, successful logins for each authentication method, such as password, SMS, authenticator app, or passkey.
- With an identity pool or organization selected, successful and incomplete logins for each authentication method.
Why it matters: Tracks progress toward passwordless authentication goals and identifies adoption rates of security features like MFA.
When to check: To measure success of passwordless or MFA rollout initiatives.
Authentication Distribution
This chart shows login activity patterns for your selected time period.
What it shows: Stacked bar chart showing successful (darker) and failed (lighter) login attempts by time. The dotted line shows the overall trend. The specific time period depends on your date range selection (24 hours, 7 days, 30 days, and so on).
Why it matters: Helps you establish what normal login activity looks like for your users, so you can quickly spot unusual patterns like off-hours spikes that might indicate compromise or attacks.
When to check: To understand user behavior and baseline authentication load.
Top Incomplete Authentications
This chart shows which accounts have the most incomplete login attempts. It appears when you select an identity pool in the Identity provider filter.
What it shows: Users of the selected identity pool with the most incomplete authentication attempts during the selected time period, ranked by count.
Why it matters: Frequent failures can point to login issues, such as a forgotten password, or to suspicious behavior, such as an attacker guessing a password.
When to check: During investigations of suspicious activity or as part of ongoing security monitoring.
What to do: Contact affected users to confirm their accounts are not compromised. Check whether the failures come from user error or from attack attempts.
Top Password Reset Activity
This chart shows which accounts request the most password resets. It appears when you select an identity pool in the Identity provider filter.
What it shows: Users of the selected identity pool with the most password resets during the selected time period, ranked by count.
Why it matters: Frequent resets can point to account access issues or forgotten credentials, or to an attacker trying to take over an account.
When to check: To find users with repeated reset requests who might need help, or whose accounts might be under attack.
What to do: Contact users with high reset activity. Offer help with password management, or investigate whether the resets are part of a takeover attempt.
LOA Score Distribution
This chart shows how authentication confidence (Level of Assurance) changes over time.
What it shows: The average LOA score across all login attempts for your selected time period (24 hours, 7 days, 30 days, and so on). Blue bars show the LOA score for each hour or day. The dotted line shows the trend.
Why it matters: Lower LOA scores indicate weaker confidence in authentication and higher login risk. Track this over time to see if your authentication security is improving or declining, and identify periods when login confidence drops.
When to check: Regularly monitor LOA trends to ensure authentication quality stays strong, especially after policy changes or security updates.
Device/Browser/OS Intelligence
This section shows the devices, browsers, and operating systems users are using to authenticate.
What it shows: Three separate donut charts showing: Browsers (Microsoft Edge, Chrome, Safari, Firefox), Operating Systems (Windows, macOS, iOS, Android), and Device Types (Desktop, Mobile, Wearables, Virtual Machines). Each shows the count and percentage of authentication attempts.
Why it matters: Helps you optimize the authentication experience for your user base and identify unsupported or vulnerable device/browser combinations.
When to check: When planning feature releases, assessing mobile vs desktop usage, or troubleshooting device-specific authentication issues.
How to use this dashboard
- In SecureAuth Connect, from the left menu, go to Analytics > Authentication Summary.
- Use the date range picker at the top to select the time period you want to analyze.
- To see one identity provider, select it in the Identity provider filter. Selecting an identity pool also shows the top incomplete authentications and password reset charts.
- Hover over charts to see detailed values.