Run Reports

You can generate and download the following reports from the Cloud Administration Console:

• All Users

• Agent Inventory

• Enrollment Code Events

• Hardware OTP Credential Information

• Password Reset Code Events

• Admin Users (download only)

• Radius Clients (download only)

All Users

The All Users report provides both general and detailed information about users registered in Cloud Access Service (CAS). It includes:

• User and account identifiers such as email, usernames, full name, manager, unique ID (DN), user ID, and identity source details.

• Access and authentication details such as account creation and updates, authentication history, status, device and application information, cloud activity, and directory or hybrid user classification.

• Credentials data such as FIDO, SMS, voice, OTP, and hardware authenticator data, including registration, activation, expiration, and lock status.

• Emergency access code information, including creation, expiration, last use, lock events, and offline access settings.

Agent Inventory

The Agent Inventory report provides information about Cloud-connected MFA agents, either natively connected or proxied through Authentication Manager (AM).

• Agent information details such as client ID, host name, initiating IP, platform, software ID, agent type, and version.

• Activity and offline data such as timestamps for first seen, last authentication, last offline data download, and offline data expiration (UTC).

Enrollment Code Events

The Enrollment Code Events report provides information about the generation and voiding of secure enrollment codes for the past 30 days.

• Event detailssuch as whether the action was an enrollment code generation or voiding event, along with the result summary (Success, Partial Success, or Fail) and timestamp.

• User and Issuer information such as the user emails involved in each event and identifies who issued the action.

• Error breakdown details such as failures by cause, including code not found, invalid user or email format, invalid validity duration, email sending failure, and code generation not allowed.

Hardware OTP Credential Information

The Hardware OTP Credential Information report provides details on all RSA hardware OTP credentials registered in CAS, as well as the users who have activated them.

• Authenticator details such as serial number, name, type, registration and expiration dates, status, and OTP configuration.

• User and activity details such as user information (email, name) along with assignment, activation, and last authentication data.

Password Reset Code Events

The Password Reset Code Events Report provides details on events triggered by both API and Cloud Administration Console requests to generate or void password reset codes over the past 30 days.

• Event summary such as the operation type (password generation or voiding), outcome (Success, Partial Success, Fail), timestamp, and the issuer of the request.

• Email outcome such as the user emails involved and classifies them by successful events or specific failure reasons (for example, Code Not Found, Invalid User, Invalid Email Format, Invalid Validity Duration, Unable To Send Email, Code Generation Not Allowed).

Admin Users

The Admin Users report displays information about your tenant's administrators, such as their roles, last login, account information, and so on.

Radius Clients

The Radius Clients report displays information about added RADIUS clients, such as client and profile name, policy assigned, authentication message timeout, last authenticated date, and other relevant settings.

To view the full list of columns included in the reports, generate and download them.

Use the following procedure to generate and download the preceding reports. The Admin Users and Radius Clients reports are available for direct download.

Before you begin 

To ensure that the report is up-to-date, make sure your identity sources are synchronized.

Procedure 

1. In the Cloud Administration Console, click Users > Reports.

2. Click Generate next to the report that you need to run.

   The report status automatically updates at intervals.

   Note:  The report might take several minutes to complete, depending on the amount of data being compiled. You can navigate to other pages and continue working while waiting.

3. After the report is generated, click Download CSV to download the report. You can also download the RADIUS Clients report from Authentication Clients > RADIUS. For more information, see Downloading the RADIUS Clients Report.