Administrative log files
Administrative logs provide information that helps you in troubleshooting BMC Atirum Single Sign-On (SSO) access related errors. There are two kinds of administrative log files:
Access logs (amConsole.access)
The access logs record BMC Atrium SSO action attempts and successful results. These logs have a suffix, .access.
- amAuthentication.access — Contains log data for when users log into and out of OpenAM, including failed authentications
- amConsole.access — Contains data about actions run as the administrator in the console, including changes to realms and policies
- amPolicy.access — Contains data about authorization actions permitted by policies, including policy creation, removal, or modification
- amPolicyDelegation.access — Contains data about actions as part of the policy delegation, including any changes to the delegation
- amSSO.access — Contains data about user sessions, including times of access, session time outs, and session creation/termination
- Entitlement.access — Contains data about entitlement actions or changes
- IDFF.access — Contains data about federation actions, including the creation of authentication domains or the hosted providers
- SAML2.access — Contains data about SAML 2 actions, including changes to assertions, artifacts, response, and requests
- ssoadm.access — Contains data about actions completed for SSO as admin
- WSFederation.access — Contains data about activity for WS Federation, including changes and access information
Error logs (amConsole.error)
The error logs record BMC Atrium SSO service attempts and service errors. These logs have a suffix, .error.
- amAuthentication.error — Contains log data about errors encountered when users login and out of OpenAM
- amConsole.error — Contains data on errors encountered during administrator sessions
- amPolicy.error — Contains data on errors encountered during actions related to the policy
- IDFF.error — Contains data on errors encountered during federation actions
- SAML2.error — Contains data about errors encountered during SAML 2 actions
- WSFederation.error — Contains data on errors encountered during WS Federation
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*