prism_token_enrolledandactivated - Token enrolled and activated (PRISM)
This is the documentation for the audit log event prism_token_enrolledandactivated
CEF:0|PhenixID|PAS|6.0.0|prism_token_enrolledandactivated|Token enrolled and activated (PRISM)|4|duser= phxHwTokenSerialNumber= phxTokenId= phxTokenType= sourceServiceName= suser=
An event that signals a token has been enrolled and activated.
- Severity: 4 NOTICE
Attributes
duser
- Data type: String
The resulting user id for the authenticator
phxHwTokenSerialNumber
- Data type: String
The serial number of the hardware token
phxTokenId
- Data type: String
The token (hardware or software, can be ex. a HOTP, TOTP or OneTouch token) id
phxTokenType
- Data type: String
The token type (PKI / HOTP / TOTP / Prefetch / HW token)
sourceServiceName
- Data type: String
The source servicename
suser
- Data type: String
The source user who performed the action