Authentication failures
The reason for authentication failure is included in two different locations in the authentication audit event:
- The data element
- The outcome element
Primarily, the data element is for compatibility with the earlier version of audit events. Later versions of audit events use the outcome element.
Parent topic: XML output of native audit events