Monitor Login History
As an admin, you can monitor all attempts to log in to Salesforce and to your Experience Cloud sites. The Login History page shows up to 20,000 records of user logins for the past 6 months. To see more records, download the information to a CSV or GZIP file.
Required Editions
| Available in: Salesforce Classic and Lightning Experience |
| Available in: Contact Manager, Group, Professional, Enterprise, Performance, Unlimited, and Developer Editions |
| User Permissions Needed | |
|---|---|
| To monitor logins: | Monitor Login History OR Manage Users |
Know who logged in, at what time, and from where. To view this information, go to the Login History in Setup.
- Authentication Method References. Monitor how your OpenID providers authenticate users
that log in to your org through OpenID Connect. For example, see which users log in with
multi-factor authentication (MFA).
To show you how your OpenID provider is authenticating users, Salesforce pulls the authentication method from JSON strings in the OpenID Connect token returned by your provider. Work with your provider to define the values used in the JSON strings. To get started, you can see the values defined by the Internet Engineering Task Force. These values aren't necessarily supported by your OpenID provider. For more information on the Authentication Method References claim, see the OpenID Connect Core 1.0 standards from the OpenID Foundation.
- HTTP Login Method–View the HTTP method used for the session login: POST, GET, or Unknown.
- SAML Single Sign-On (SSO)–If your org uses SAML SSO identity provider certificates, view SAML SSO history.
- My Domain–You can see when users are logging in with a My Domain URL, which is displayed in the Login URL column.
- License Manager Users–Names in the format 033*********2@00d2********db indicate internal users who are associated with the License Management App (LMA). This app manages the number of licenses used by a subscriber org. These internal users can appear in the License Management org (LMO) and in subscriber orgs that have an AppExchange package managed by the LMA.
- IP Tracking—The Login History provides two ways to track IP addresses.
- The Source IP column stores the client IP address of the request that first reaches Salesforce during a login. For example, if the client redirects to a client proxy, then to a Salesforce proxy, and finally to the Salesforce app, the Source IP column stores the IP address of the client proxy.
- The Forwarded for IP column stores the value that the client passed in the
X-Forwarded-Forheader. This header is sometimes used to store IP addresses when the client redirects through one or more proxies. In that case, you can use this column to see the client’s origin IP address. For example, if the client redirects to a client proxy, then to a Salesforce proxy, and then to the Salesforce app, the Forwarded for IP column can store all four IP addresses—the client (origin) IP, both proxy IPs, and the Salesforce app IP.The maximum length is 256 characters. Longer values are truncated. This column doesn’t get populated for OAuth and single sign-on logins.
- Logins via connected apps–View the login subtype to see logins for connected apps that
use these OAuth 2.0 flows.
- Client credentials flows
- User-agent flows, including hybrid user-agent and user-agent with ID token flows
- Username-password flows
- Web-server flows, including the hybrid web-server flow
Important For security, we recommend blocking user-agent and username-password flows. - Password resets—View the login subtype to see when a user resets their password.
- Login History List Views
You can specify filters and fields to create Login History custom list views. - Create Login History List Views
To create a Login History custom list view, specify filter criteria and fields to display. - Download Login History
You can download the past 6 months of user logins to Salesforce and to your Experience Cloud sites. This report includes logins through the API.
Login History List Views
You can specify filters and fields to create Login History custom list views.
Required Editions
| Available in: Salesforce Classic and Lightning Experience |
| Available in: Contact Manager, Developer, Enterprise, Group, Performance, Professional, and Unlimited Editions |
| User Permissions Needed | |
|---|---|
| To monitor logins: | Monitor Login History OR Manage Users |
You can use these filters to create custom list views.
- Application
- Authentication Method Reference
- Login Subtype
- Login Time
- Login Type
- Login URL
- TLS Protocol
- TLS Cipher Suit
For example, you can create a view of all logins for a time range or from an application such as a mobile device. You can also define which fields to include in the custom list view. Like the default view, a custom view shows up to 20,000 records of login history during the past 6 months.
For most apps, you can use the Application filter to view logins from a specific app. For apps with OAuth-based authentication, the Application filter works differently. To view logins from an app that uses OAuth, set the value for Application to OAuth. Then use other criteria such as the Login URL to narrow your view to OAuth-based logins from a specific app.
You can display up to 15 fields, but they must be available in your page layout. Text area fields display up to 255 characters.
Create Login History List Views
To create a Login History custom list view, specify filter criteria and fields to display.
Required Editions
| Available in: Salesforce Classic and Lightning Experience |
| Available in: Contact Manager, Developer, Enterprise, Group, Performance, Professional, and Unlimited Editions |
| User Permissions Needed | |
|---|---|
| To monitor logins: | Monitor Login History OR Manage Users |
- On the Login History page, click Create New View.
- Enter a name for the view.
- Specify the filter criteria.
- Select the fields to display.
Download Login History
You can download the past 6 months of user logins to Salesforce and to your Experience Cloud sites. This report includes logins through the API.
Required Editions
| Available in: Salesforce Classic and Lightning Experience |
| Available in: Contact Manager, Developer, Enterprise, Group, Performance, Professional, and Unlimited Editions |
| User Permissions Needed | |
|---|---|
| To monitor logins: | Monitor Login History OR Manage Users |
- From Setup, in the Quick Find box, enter Login History, and then select Login History.
- Select the file format to use: CSV File or GZIP File:. Because the GZIP file is compressed, it’s the preferred option for the quickest download time.
- Select the file contents. The All Logins option includes API access logins.
- Click Download Now.
