Filter identity provider activity data

Complete this procedure to filter identity provider activity data.
Note: You must be an ETP super administrator or a user with a specific permission to view the Identity Provider Activity report. For more information, see Enterprise Threat Protector roles.

How to

  1. In the Enterprise Center navigation menu, select Threat Analytics > Activity > Identity Provider Activity.
  2. To filter data based on date and time, see Filter data based on date and time.
  3. To configure and apply a filter, see Configure and apply a filter.
  4. Select a dimension or criteria to define what data is shown.
  5. To search for identity provider connections that's grouped by the selected dimension, see Search for identity provider activity.