What do "Unsuccessful Login Attempt" and "Unsuccessful Attempt to Confirm Identity" mean in the Empower system audit trail? - WKB28721

ENVIRONMENT

• Empower (all versions)

ANSWER

There is a difference between "Unsuccessful Login Attempt" and "Unsuccessful Attempt to Confirm Identity" in the Empower software system audit trail record.

• Unsuccessful Login Attempt – When trying to log in at the Empower login window, if the user enters the wrong password, the "Unsuccessful Login Attempt" record is generated. In the User column, Empower displays user as "System/Administrator", and in the details column, Empower displays the username that was typed during login. In the example, the user shows as System and the user account shows as "analyst1". Note that no matter if the user is available or not in Empower, if the password is incorrect or the username is incorrect, Empower displays only the "Unsuccessful login attempt" message. This is expected.
• Unsuccessful Attempt to Confirm Identity – If the user already logged in to Empower and the session is locked out, during session unlock, if the user enters incorrect login credentials, the "Unsuccessful Attempt to Confirm Identity" record is generated. In this case, the username shown will be that of the one who already logged in to Empower and whose session is locked out.

ADDITIONAL INFORMATION