ADFS successful login doesn't show in the event viewer

HK G 406 Reputation points
2020-04-20T18:56:39.753+00:00

I enabled the ADFS log according the doc https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/troubleshooting/ad-fs-tshoot-logging.

I can see the failed login but the successful login doesn't show in the event viewer. Any idea why this happens? I did confirm the Audit Application generated has both failure\successful selected in the local security policy.

Thanks

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
955 questions
Accepted answer
  1. Pierre Audonnet - MSFT 9,976 Reputation points Microsoft Employee
    2020-04-21T12:27:05.257+00:00

    Those are event if the AD FS Admin log. Audit events will be in the Security log.

3 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. HK G 406 Reputation points
    2020-04-20T23:44:56.947+00:00

    I got the event ID 364\1000\342.

    Thanks

  2. ppinero 1 Reputation point
    2020-05-06T11:42:16.89+00:00

    Hi,

    I have the same problem.... i confirm that I have enable both audits for succes and failed logins but i do not see success logins....

  3. ppinero 1 Reputation point
    2020-05-06T11:43:34.667+00:00

    I have the same problem... i am not able to view the success login .... how did you achieve it?.

    Thank you in advance.