IdentityProviderEventStore

Tracks problems and successes with inbound SAML or OpenID Connect authentication requests from another app provider. It also records outbound SAML responses when Salesforce is acting as an identity provider. IdentityProviderEventStore is a big object. This object is available in API version 51.0 and later.

describeSObjects(), query()

Accessing this object requires either the Salesforce Shield or Salesforce Event Monitoring add-on subscription as well as the View Real-Time Event Monitoring Data and CustomizeApplication permissions.

See Also

Type: reference

Properties: Nillable

Description: The ID of the app provider seeking authentication.

Type: reference

Properties: Nillable

Description: The ID of the authentication session.

Type: picklist

Properties: Restricted picklist

Description: The error code for the authentication issue. Possible values are:

  • AppAccessDenied—Error: App access denied
  • AppBlocked—Error: App blocked
  • ClientUnapproved—Error: Invalid grant
  • CodeExpired—Error: Expired authorization code
  • InternalError—Error: Internal Error
  • InvalidAuthnRequest—Error: Unable to parse AuthnRequest from service provider
  • InvalidClientCredentials—Error: Invalid client credentials
  • InvalidCode—Error: Invalid authorization code
  • InvalidDeviceId—Error: Invalid device ID
  • InvalidIdpEndpoint—Error: Invalid Identity Provider Endpoint URL
  • InvalidIssuer—Error: Invalid Issuer
  • InvalidScope—Error: One or more invalid scopes
  • InvalidSessionLevel—Error: Invalid session level
  • InvalidSettings—Error: IdP certificate is invalid or doesn’t exist
  • InvalidSignature—Error: Invalid Signature
  • InvalidSp—Error: Misconfigured or invalid service provider
  • InvalidSpokeSp—Error: Invalid spoke SP settings
  • InvalidUserCredentials—Error: Invalid user credentials
  • NoAccess—Error: User doesn’t have access to this service provider
  • NoCustomAttrValue—Error: User doesn’t have a value for the subject custom attribute
  • NoCustomField—Error: Custom field not found
  • NoSpokeId—Error: No Spoke ID found
  • NoSubdomain—Error: My Domain isn’t configured
  • NoUserFedId—Error: User doesn’t have a Federation Identifier selected
  • OauthError—OAuth Error
  • Success
  • UnableToResolve—Error: Unable to resolve request into a Service Provider
  • UnknownError—Unknown Error

Type: dateTime

Properties: Filter, Sort

Description: The date and time of the event.

Type: string

Properties: Filter, Sort

Description: The unique identifier for each record in IdentityProviderEventStore.

Type: boolean

Properties: Defaulted on create

Description: Whether a logout URL has been assigned to the app. Users are redirected to this URL when they log out. The default value is false.

Type: string

Properties: Nillable

Description: The identity (username) of the user being authenticated.

Type: picklist

Properties: Restricted picklist

Description: The code describing how the authentication request was initiated. Possible values are:

  • IdP—IdP-Initiated SAML
  • OauthAuthorize—OAuth Authorization
  • OauthTokenExchange—OAuth Token Exchange
  • SP—SP-Initiated SAML
  • Unused

Type: string

Description: The authentication URL of the SAML provider.

Type: picklist

Properties: Nillable, Restricted picklist

Description: The type of SSO. Possible values are: Values are Oidc or Saml.

Type: reference

Properties: Nillable

Description: The ID of the user seeking authentication.