IdentityProviderEventStore

Tracks problems and successes with inbound SAML or OpenID Connect authentication requests from another app provider. It also records outbound SAML responses when Salesforce is acting as an identity provider. IdentityProviderEventStore is a big object. This object is available in API version 51.0 and later.

Supported Calls

describeSObjects(), query()

Special Access Rules

Accessing this object requires either the Salesforce Shield or Salesforce Event Monitoring add-on subscription as well as the View Real-Time Event Monitoring Data and CustomizeApplication permissions.

See Also

Big Objects Implementation Guide

Fields

AppId

Type: reference

Properties: Nillable

Description: The ID of the app provider seeking authentication.

AuthSessionId

Type: reference

Properties: Nillable

Description: The ID of the authentication session.

ErrorCode

Type: picklist

Properties: Restricted picklist

Description: The error code for the authentication issue. Possible values are:

AppAccessDenied—Error: App access denied
AppBlocked—Error: App blocked
ClientUnapproved—Error: Invalid grant
CodeExpired—Error: Expired authorization code
InternalError—Error: Internal Error
InvalidAuthnRequest—Error: Unable to parse AuthnRequest from service provider
InvalidClientCredentials—Error: Invalid client credentials
InvalidCode—Error: Invalid authorization code
InvalidDeviceId—Error: Invalid device ID
InvalidIdpEndpoint—Error: Invalid Identity Provider Endpoint URL
InvalidIssuer—Error: Invalid Issuer
InvalidScope—Error: One or more invalid scopes
InvalidSessionLevel—Error: Invalid session level
InvalidSettings—Error: IdP certificate is invalid or doesn’t exist
InvalidSignature—Error: Invalid Signature
InvalidSp—Error: Misconfigured or invalid service provider
InvalidSpokeSp—Error: Invalid spoke SP settings
InvalidUserCredentials—Error: Invalid user credentials
NoAccess—Error: User doesn’t have access to this service provider
NoCustomAttrValue—Error: User doesn’t have a value for the subject custom attribute
NoCustomField—Error: Custom field not found
NoSpokeId—Error: No Spoke ID found
NoSubdomain—Error: My Domain isn’t configured
NoUserFedId—Error: User doesn’t have a Federation Identifier selected
OauthError—OAuth Error
Success
UnableToResolve—Error: Unable to resolve request into a Service Provider
UnknownError—Unknown Error

EventDate

Type: dateTime

Properties: Filter, Sort

Description: The date and time of the event.

EventIdentifier

Type: string

Properties: Filter, Sort

Description: The unique identifier for each record in IdentityProviderEventStore.

HasLogoutUrl

Type: boolean

Properties: Defaulted on create

Description: Whether a logout URL has been assigned to the app. Users are redirected to this URL when they log out. The default value is false.

IdentityUsed

Type: string

Properties: Nillable

Description: The identity (username) of the user being authenticated.

InitiatedBy

Type: picklist

Properties: Restricted picklist

Description: The code describing how the authentication request was initiated. Possible values are:

IdP—IdP-Initiated SAML
OauthAuthorize—OAuth Authorization
OauthTokenExchange—OAuth Token Exchange
SP—SP-Initiated SAML
Unused

SamlEntityUrl

Type: string

Description: The authentication URL of the SAML provider.

SsoType

Type: picklist

Properties: Nillable, Restricted picklist

Description: The type of SSO. Possible values are: Values are Oidc or Saml.

UserId

Type: reference

Properties: Nillable

Description: The ID of the user seeking authentication.