[keycloak-dev] Record activity for user accounts

Stian Thorgersen sthorger at redhat.com
Tue Jun 7 07:23:53 EDT 2016


You can add comments to https://issues.jboss.org/browse/KEYCLOAK-1250

On 7 June 2016 at 13:22, Stian Thorgersen <sthorger at redhat.com> wrote:

> We're planning to do exactly that when we revamp the account management
> console.
>
> On 7 June 2016 at 09:57, Thomas Darimont <thomas.darimont at googlemail.com>
> wrote:
>
>> Hello Group,
>>
>> Some account services like google for instance record and list activities
>> that
>> happend in an account like: Access Type, Location, Date time.
>>
>> I think this would make a great addition to the account pages in Keycloak,
>> since it would help users to detect suspicious account activity early.
>>
>> What do you think?
>>
>> Google shows the following information:
>> * Access Type (Which device was used to access the account: Browser,
>> Mobile, etc...)
>> For this one could add a device detection library to the account page
>> like mobile-detect.js
>> http://hgoebl.github.io/mobile-detect.js/
>>
>> * Location (based on IP-Address)
>> IP Geolocation could be based on free geolite database
>> http://dev.maxmind.com/geoip/legacy/geolite/
>> https://github.com/maxmind/GeoIP2-java
>>
>> * Date time
>> Datetime of access + humanized "x mins ago"
>>
>> * current "access point"
>> The current "access point" is also shown like:
>> Your computer uses the IP XXX.XXX.XXX.XXX. (Some Country)
>>
>> Cheers,
>> Thomas
>>
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-dev/attachments/20160607/9d1a3e57/attachment.html 


More information about the keycloak-dev mailing list