kgraham Super Contributor.
Super Contributor.

ADFS - UPN and External IP address

We are looking to watch who utilizes ADFS externally.   this means gathering the UPN and External IP address. 

So far I have gathered that I may need Event 501 and possibly 299.   has anyone already tackled this beast?

If you have can you give me a leg up?

Thank you.



1 Reply
StevenD Honored Contributor.
Honored Contributor.

Re: ADFS - UPN and External IP address

Curious if you ever sorted this out. We're looking at doing the same (with a slightly larger list of of ADFS Auditing events).

Key value mapping in the security.csv file would work sorta... But i'm looking for a more full flushed out parsing tho.

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.