Skip to main content

Analytics

Analytics gives you real-time and historical views of authentication activity and user growth for your organization. Analytics is part of the main organization Dashboard — there is no separate Analytics page.

Accessing Analytics​

Navigate to your organization Dashboard at /orgs/{orgId}/portal/. (The legacy /orgs/{orgId}/portal/analytics URL now redirects here.)

Dashboard Overview​

The Dashboard summarizes the activity in your organization:

The organization Dashboard with the setup checklist and the summary tiles

Time range​

The buttons above the tiles switch every number, chart and table on the page between the last 24h (hourly buckets), 7 days, 30 days (the default) and 90 days. The URL carries the choice (?range=7d). Each tile compares the period with the one of the same length immediately before it, and shows a small trend line of the last buckets.

Summary tiles​

TileDescription
ApplicationsRegistered OAuth applications, with a link to manage applications
UsersRegistered users, split into active and inactive
RolesRoles defined in the organization, with a link to manage roles
New signupsAccounts created in the period, with the change versus the previous period
Sign-insSign-in attempts in the period, split into succeeded and failed
Active usersDistinct people who signed in at least once in the period
Failed sign-in rateFailed attempts as a share of all attempts; failures going up reads as bad
Tokens issuedAccess tokens minted in the period and the grant types they came from

Charts and lists​

Every chart has a View as table link underneath with the same numbers, and a tooltip on hover. Until someone has signed in or an application has obtained a token, the Dashboard shows the set-up path instead of empty charts.

PanelDescription
Sign-insSuccessful and failed attempts per day (per hour in the 24h view)
Active usersDistinct people who signed in, per day, with the share of all users active in the last 30 days
New signupsAccounts created per day
Sign-in methodsHow people proved who they are: password, passkey, LDAP, social, SAML, OpenID Connect, magic link or a remembered device. Sign-ins recorded before this breakdown existed show as Not recorded
Access tokens issuedTokens per day by grant type (authorization code, refresh token, client credentials, …)
Audit eventsEverything in the audit log per day by severity, with the share that succeeded and the number of errors
Most frequent eventsThe top event types and how many of each failed
Why sign-ins failFailure reasons across all attempts (wrong password, locked account, …)
Authentication latencyMedian and 95th-percentile server time to complete a sign-in or mint a token. Recorded for every event from now on, so it fills in as new events arrive
When people sign inAttempts by weekday and hour of day (server time)
Top applicationsApplications by audit events in the period
Recent sign-insThe latest sign-ins of the last 24 hours with their status
Security postureMFA (multi-factor authentication) and passkey coverage of the user base, how many users were active in the last 30 days, and whether adaptive security, passkeys, MFA and social sign-in are on
Adaptive security decisionsWhat risk scoring did with each sign-in — allowed, challenged with MFA or blocked — per day

The Dashboard charts for sign-ins, active users and tokens

For the full per-event trail and arbitrary date-range filtering, use the Audit Logs page.

API Access​

You can pull analytics data programmatically for use in your own dashboards or reporting. All three endpoints return { "data": { ... } }.

# Dashboard summary (no parameters)
# -> users, clients, authentication (last 7 days), audit (last 7 days)
curl https://your-domain.com/orgs/{orgId}/api/v1/admin/analytics/dashboard \
  -H "Authorization: Bearer {admin_token}"

# Login activity — daily breakdown over the last N days (`days`: 1–90, default 30)
curl "https://your-domain.com/orgs/{orgId}/api/v1/admin/analytics/logins?days=7" \
  -H "Authorization: Bearer {admin_token}"

# User growth — registrations, verification and MFA status over the last N days (`days`: 1–90, default 30)
curl "https://your-domain.com/orgs/{orgId}/api/v1/admin/analytics/users?days=30" \
  -H "Authorization: Bearer {admin_token}"
Date ranges

The logins and users endpoints accept only an integer days parameter (they do not take from/to). Each computes its own period: { days, from, to } from that value. For arbitrary date ranges, query the audit-logs API, which supports from/to.