Auditing users and login activity

Okta is FINBOURNE’s identity provider. You can retrieve Okta’s system logs from within FINBOURNE applications. This enables you to conveniently monitor and troubleshoot the following activity:

• User creations and removals

• Logins to FINBOURNE applications

• Role assignments.

This service is provided by Okta’s SystemLogs API. You can access this service using the following APIs provided by FINBOURNE’s Identity application:

• The Identity ListLogs API enables you to retrieve Okta’s system log for every user.

• The Identity ListUserLogs API enables you to retrieve Okta’s system log just for you.

Alternatively, if you have a Luminesce license you can access this service using the Sys.Okta.SystemLogs provider.

Note the following:

• Logs older than 90 days are not returned, in accordance with Okta’s data retention policy.

• All requests are subject to Okta’s rate limits.

For example, the following call to the ListLogs API uses the oktaSince and oktaUntil query parameters to retrieve all activity for every user on 1 March 2025:

curl -X GET "https://<your-domain>.lusid.com/identity/api/logs?oktaSince=2025-03-01T00%3A00%3A00Z&oktaUntil=2025-03-02T00%3A00%3A00Z"
  -H "Authorization: Bearer <your-API-access-token>"

Note query parameters map directly to Okta’s SystemLogs API query parameters, so for more information see Okta’s API documentation.

To use the Luminesce Sys.Okta.SystemLogs provider, navigate to the Data Virtualisation > Query Editor dashboard in the LUSID web app and write a valid SQL query, for example:

select * from Sys.Okta.SystemLogs 
    where OktaSince = #2025-03-01 00:00:00# 
    and OktaUntil = #2025-03-02 00:00:00#