Login Activity

The Login Activity page provides a detailed record of authentication events across your Forjinn workspace. Use it to monitor who logged in, when, from where, and whether the attempt was successful.

Accessing Login Activity

1. Navigate to Admin or Settings from the left-hand sidebar.
2. Click on Login Activity to open the authentication log.

Activity Log Overview

The Login Activity page displays a time-sorted table of authentication events. Each entry typically includes:

• User: The account email or name associated with the login attempt.
• Event Type: The action performed — Login, Logout, Failed Login, Password Change, 2FA Verify, SSO Auth.
• Timestamp: Date and time of the event (shown in your local timezone).
• IP Address: The source IP address of the login attempt.
• Location: Approximate geolocation derived from the IP address.
• Device / Browser: User-agent information identifying the browser and operating system.
• Result: Whether the event succeeded or failed, along with any failure reason.

Filtering and Searching

You can narrow the log view using filters at the top of the page:

• By User: Search for a specific account email or name.
• By Date Range: Select a custom time window (e.g., last 7 days, last 30 days, or a custom range).
• By Event Type: Show only logins, failed attempts, logouts, or other specific events.
• By Result: Filter for successful or failed events only.
• By Workspace: In multi-workspace environments, scope the log to a particular workspace.

Exporting Logs

For audit, compliance, or security investigation purposes, you can export filtered login activity:

1. Apply the desired filters.
2. Click the Export button.
3. Choose the format (CSV or JSON).
4. Download the file for offline review or upload to your SIEM tool.

Security Monitoring

Login Activity is a primary tool for detecting suspicious behavior:

• Failed Login Spikes: A surge in failed attempts may indicate a brute-force attack against a user account.
• Unusual Locations: Login attempts from unexpected geographic regions should be investigated.
• New Devices: Authentication from unrecognized browsers or operating systems may indicate account compromise.
• Rapid Login/Logout Cycles: Could signal automated scraping or testing against accounts.

Retention

Forjinn retains login activity logs for a configurable period. The default retention is 90 days. Organization or platform administrators may adjust the retention period or integrate logs with an external system for longer-term storage.

Best Practices

• Review periodically: Set a schedule (weekly or monthly) to scan for unusual patterns.
• Enable 2FA: Require two-factor authentication for all admin and editor accounts to reduce login-related risks.
• Combine with audit logs: Cross-reference Login Activity with permission changes, role assignments, and other admin actions captured in the broader audit trail.
• Export for compliance: Regularly export logs to meet regulatory requirements such as SOC 2, GDPR, or HIPAA.