Is it possible to audit successful and failed login events in the UMP?
There is currently a limitation with the audit probe where it is not able to capture successful login events in the UMP for account contact users.
When a bus user logs in to the UMP and entry will be logged in the audit probe and it will also log an entry if a bus user login attempt is unsuccessful.
When an account contact user successfully logs in to the UMP no entry will be logged in the audit probe as it is unaware of the login event. If, on the other hand, an account contact user has a login failure, an entry will be logged in the audit probe.