Question:

How to capture the OAuth 2.0 and OpenID connect authentication events in Vault?

Answer:

Domain Administrators can capture the OAuth 2.0 and OpenID Connect authentication events to troubleshoot potential authentication or configuration issues through the Troubleshoot tab in the OAuth 2.0 / OpenID Connect Profile page.  Each capture action logs events for up to ten (10) authentication requests.

To capture OAuth / OpenID Connect Authentication Events:

1. Navigate to: Admin --> Settings --> OAuth 2.0 / OpenID Connect Profile.
2. Click the Troubleshoot tab.
3. Optional: From the User field, select a user for which to capture a log of events. If a user is not selected, Vault captures the events for any user.
4. Optional: Enter a client ID in the Client ID field. If a client ID is not provided, Vault captures the events for any client ID.
5. Click the Start Capture button to begin running the capturing process. If the profile contains events from a previous capture, Vault removes all existing events before the new capture starts and displays a dialog to confirm the user wants to continue. Vault logs any captured events in the Events table.
6. Optional: Click the Refresh button to refresh the Event table contents.

Related Documentation:

N/A