AddRemove Device from a Device Group Create a device group and add device to it

Viewing Additional Details for Investigation 6-53 4. In the search results, view the following for the device from each location: ■ Failure Counter the login fail count ■ Success Counter the login success count

6.13.8.8 Search and view all the alerts triggered and generated for the device

To search and view all the alerts triggered and generated for the device. The alerts are shown with different color codes to indicate the alert levels whether it is high, medium or low:

1. Click the Device ID link in the Session search page or other pages.

The Device Details page is opened and shows additional details.

2. Click the Alerts tab.

This tab lists alerts that are triggered and generated for a device during transaction process.

3. Search for the different alerts using the following filter parameters:

4. In the search results, view the alerts triggered and generated for the device: The alerts are shown with different color codes to indicate the alert levels whether is high, medium or low. 6.13.8.9 Search and view all the login sessions or search login sessions for a particular period for the device To search and view all the alerts triggered and generated for the device. The alerts are shown with different color codes to indicate the alert levels whether it is high, medium or low: 1. Click the Device ID link in the Session search page or other pages. The Device Details page is opened and shows additional details.

2. Click the Sessions tab.

This tab lists login sessions for a device for a particular period. 3. Search for the different sessions using the following filter parameters: Table 6–46 Alert Filters Filters Description Alert Message Display name describing the alert. Alert ID ID of an alert. Alert Type Type of the alert whether fraud, investigation, information, or other types. Alert Level Severity of the alert whether high, medium, low. Rule Name Rule that generated the alert. Date Triggered Given time when the alerts triggered for the user. 6-54 Oracle Fusion Middleware Administrators Guide for Oracle Adaptive Access Manager

6.13.8.10 Search and view the fingerprints created for the device

To search and view the fingerprints created for the device: 1. Click the Device ID link in the Session search page or other pages. The Device Details page is opened and shows additional details.

2. Click the Fingerprint Data tab.

This tab lists the fingerprints created for the device during login. 6.13.8.11 Navigate to other details pages for groups, alerts, users, locations, sessions and fingerprints You can click links on a tab in a details page to open other details pages: ■ From the Users tab: click the User Name link to open the User Details page. ■ From the Groups tab: click the Group Name link to open the Group Details page. ■ From the Locations tab, click the Location link to open the Location Details page. ■ From the Alerts tab: click the Alert Message to open the Alert Details page. ■ Links for User Name, IP address, session, and location are available on the Sessions tab.

6.14 Browser or Flash Fingerprint Details

You can drill down to the Fingerprint Details page from the Sessions search results by selecting a Browser or Flash Fingerprint ID. There are two different kinds of Fingerprint Details pages: ■ Flash Fingerprint ■ Browser Fingerprint Table 6–47 Sessions tab Filter Description Session ID The unique identifier for a session. Authentication Status Status of the session each logintransaction attempt creates a new session. For information, refer to Authentication Status . Client Type Virtual Authentication Devices. Device or application used for authentication or fingerprinting. For example: TextPad, KeyPad, Question Pad, login page, flash tracker. auth.client.type.enum is the enum used Alert Level Severity of the alert whether high, medium, low. User Name Login name given by user to login. Organization ID Identifies the organization to which the user belongs. IP Address Address mapped to a location usually, although some addresses are unknown or private Location Place where login or transaction occurred Session Date Get all the sessions during which the device logged in for the given time duration. Viewing Additional Details for Investigation 6-55

6.14.1 Fingerprint Details: Summary Tab

The Fingerprint Details Summary page shows general fingerprint information and the data collected during device fingerprinting. Figure 6–28 Fingerprint Details: Summary The basic information provided by this tab include: Depending on the Fingerprint type, Fingerprint data provided by this tab may include browser, OS, locale information and digital information such as Player Type, Has audio, Has mp3, Supports streaming audio, and so on. Flash fingerprint information is available only if flash is installed on the user-clients machine.

6.14.2 Fingerprint Details: Users Tab

This tab lists all the users who used the fingerprint during the timeframe specified. The Users tab of the Fingerprint Details page enables you to determine which users and how many times the fingerprint was used for each user during the login process. Table 6–48 Fingerprint Details Tab Fingerprint Details Description Fingerprint ID Unique ID generated for fingerprint by the application Fingerprint Type Type of fingerprint, whether the fingerprint is a flash or browser fingerprint. Created Date Date on which the fingerprint was created in the system