Review self-service registration events

Use the System Log to review self-service registration events in your org.

About this task

Early Access release. See Enable self-service features.

The self-service registration policy is evaluated when a user or agent clicks Sign up in the Sign-In Widget. The event is recorded in the System Log.

Before you begin

  • Your org has Identity Threat Protection enabled.
  • You have a self-service registration policy configured.

Procedure

  1. In the Admin Console, go to Reports > System Log.
  2. Query the System Log: target.type eq "???" and eventType eq "user.lifecycle.create"
  3. Review the event details:
    • outcome.result: Allow or Deny
    • outcome.reason: Self-service registration policy evaluation returned a DENY action. Otherwise, blank.
    • securityContext.email.address: The signup email address
    • securityContext.email.isDisposableDomain: True if the domain matched the disposable email set
    • SelfServiceRegistrationPolicyRuleResourceDetails: Only visible when a rule was matched
    • policyId: The policy ID string
    • policyType: Always Self-service registration
    • policyName: The rule's parent policy name
    • policyRulePriority: 0-98 for user rules, 99 for the catch-all rule
    • policyRuleAction: The matched rule's action (Allow or Deny)
    • isDisposableEmailDomain: Redundant with securityContext.email.isDisposableDomain for query convenience
    • zoneIdMatch: The matched network zone ID
    • zoneNameMatch: The matched network zone name