Types of user events – HP Identity Driven Manager Software Series User Manual

Page 223

A-7

IDM Technical Reference

Types of User Events

The USER_FAILED_LOGIN event happens whenever RADIUS sends IDM a
message of an unsuccessful login. This can have various sources, which you can
review in the Event Details. It can be either because IAS didn’t let the user log in
(bad username, password, and so forth) or because IDM rejected the login.

The IDM reasons for denied access that are currently defined include:

1 = Missing or invalid NAS-Port in Access-Request

2 = Missing or invalid NAS-IP in Access-Request

3 = Missing or invalid Username in Access-Request

4 = Unknown Domain

5 = Cannot find Knowledge base for Domain

6 = Cannot find Access Policy Group for User

7 = Access Policy Group for User has no rules

8 = Time constraint is not satisfied

9 = Location constraint is not satisfied

10 = Unknown User

11 = No matching rules were found

12 = Explicit reject by matching rule

20 = Unknown reason

For additional information, refer to the MS IAS documentation to see what the
possible values are for user log ins that are rejected or failed by RADIUS