eG Help

It is important for Salesforce administrators to track user logins to a Salesforce organization, as it will help them swiftly capture logon failures. Additionally, by monitoring user logins, administrators will also be able to swoop down on users whose password is locked. This in turn will shed light on suspicious login attempts to Salesforce. The SfUserLoginTest test reveals such login attempts to administrators.

This test monitors user logins to a Salesforce organization, and promptly alerts administrators to login failures. Administrators are also notified if any user got locked out owing to multiple invalid login attempts or if any user account was frozen before deactivation. Detailed diagnostics reveal who these users are. This way, administrators are enabled to rapidly detect and avert potential security threats to a Salesforce organization.

Outputs of the test : One set of results for the Salesforce organization being monitored

Measurement	Description	Measurement Unit	Interpretation
Users_recently_logged_in	Indicates the number of users who logged in during the last measurement period.	Number
Failed_logons	Indicates the number of users whose logon failed.	Number	Ideally, the value of this measure should be 0. A non-zero value indicates that one/more login attempts failed. To know which user logins failed, use the detailed diagnosis of this measure.
Frozen_logons	Indicates the number of user logons that is frozen.	Number	In some cases, an administrator may not be able to immediately deactivate an account, such as when a user is selected in a custom hierarchy field. To prevent users from logging in to your organization while the administrator performs the steps to deactivate them, the user accounts can be deactivated. Use the detailed diagnosis of this measure to know which user accounts are frozen.
Password_locked_users	Indicates the number of users whose password is locked.	Number	A user will become locked by violating the maximum invalid login attempts setting (defined in password policies). A user can become unlocked either by an administrator manually unlocking the user or by waiting for the lockout effective period to pass. To know which user accounts are locked, use the detailed diagnosis of this measure.