How to log failed login attempts in Google Cloud Identity platform

Viewed 794

We use Google Cloud Identity platform to support multi-tenant federated login. Depending on the tenant, we either user external identity providers or firebase authentication. For security compliance reasons, we would like to log failed login attempts. We looked into activity logging, but failed login attempts seem to be not supported:

CreateAuthUri
GetRecaptchaParam
SendVerificationCode
SignInWithCustomToken
SignInWithEmailLink
SignInWithGameCenter
SignInWithIdp
SignInWithPassword
SignInWithPhoneNumber
SignUp
VerifyIosClient

We are now considering building a custom API to log these events, which seems like a lot of additional complexity for the use case. Would there be another way to log failed login attempts?

1 Answers

I managed to find documentation about Login audit logs where you can go to configure and view event names/types such as failed login attempts:

You can also view the reason of failed login attempt with Reports API:

Related