Login log and record for Alteryx Server

Question

If using built-in authentication, I can read gallery log and look for response code of /api/auth/preauth and /api/auth/session to know the login attempt record, which is sth like this:

Registered user with wrong password -> /api/auth/preauth = 403

Registered user with correct password -> /api/auth/preauth = 200 and /api/auth/session = 200

However, I cannot find all of the above record of call in another server using window authentication

Only following record can be found in the log:

Registered user with correct password -> /api/auth/session = 200

Alteryx Gallery do not call /api/auth/preauth when using window authentication, I guess it use other authentication module in window, anyone know where can I tracked the login attempt?

I am trying to trace all login attempt, including when and what IP is it come from.

raychase · Answer

I wouldn't expect any failed logins with windows authentication as it's SSO-enabled.

Unless you're trying to capture users attempting to login that don't have valid permissions to your Gallery.

HMSUM · Answer

Thx, but for the collection, only record the access of user with successful login (which create a session), I am trying to capture all login attempt even fail (e.g. wrong password / wrong username ...) to identify any potential risk

raychase · Answer

Have you explored the sessions collection within the MongoDB?  You would find this collection within the AlteryxGallery database.