securityOverview

Admin only. Login journal figures for the last days, account and token figures, and the relevant authentication settings.

Type: SecurityOverview!

Arguments

• days: Int — Window for the login figures, 1-365, default 30.
• inactiveDays: Int — Inactivity threshold, default 90.
• passwordAgeDays: Int — Old-password threshold, default 180.

Example

query($days: Int, $inactiveDays: Int, $passwordAgeDays: Int) {
  securityOverview(days: $days, inactiveDays: $inactiveDays, passwordAgeDays: $passwordAgeDays) {
    logins {
      distinctFailedIps
      distinctIps
      distinctUsers
      failedLogins
      impersonations
      logins
      passwordChanges
      passwordInvalidations
      temporaryLocks
      tokenLogins
    }
    loginsPerDay {
      day
      failedLogins
      logins
    }
    settings {
      changePasswordAfterDays
      changePasswordAfterDaysForAdmin
      failedLoginLimitPerIp
      failedLoginLimitPerUser
      failedLoginLimitWindowMin
      lockAccountAfterFailedLoginAttempts
      lockAccountAfterFailedLoginDurationMin
      multiFactor
      passwordReuseLimit
      sessionDurationMaxHours
    }
    tokens {
      activeTokens
      tokensWithoutExpiry
      unusedTokens
    }
    users {
      activeUsers
      adminUsers
      adminsInactive
      adminsWithoutOtp
      expiredPasswords
      inactiveDays
      inactiveUsers
      invalidatedPasswords
      legacyHashPasswords
      lockedUsers
      md5Passwords
      neverLoggedIn
      oldPasswords
      passwordAgeDays
      plainPasswords
      sha512Passwords
      swissMentorUsers
      temporarilyLocked
      usersWithOtp
    }
    windowDays
  }
}