We're planning to do exactly that when we revamp the account management console.

On 7 June 2016 at 09:57, Thomas Darimont <thomas.darimont@googlemail.com> wrote:

Hello Group,

Some account services like google for instance record and list activities that

happend in an account like: Access Type, Location, Date time.

I think this would make a great addition to the account pages in Keycloak,

since it would help users to detect suspicious account activity early.

What do you think?

Google shows the following information:

* Access Type (Which device was used to access the account: Browser, Mobile, etc...)

For this one could add a device detection library to the account page like mobile-detect.js

http://hgoebl.github.io/mobile-detect.js/

* Location (based on IP-Address)

IP Geolocation could be based on free geolite database 

http://dev.maxmind.com/geoip/legacy/geolite/

https://github.com/maxmind/GeoIP2-java

* Date time

Datetime of access + humanized "x mins ago"

* current "access point"

The current "access point" is also shown like:

Your computer uses the IP XXX.XXX.XXX.XXX. (Some Country)

Cheers,

Thomas

_______________________________________________
keycloak-dev mailing list
keycloak-dev@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev