SurePassID Universal MFA uses Event Log Synchronization (ELS) to securely pull MFA audit trail events and store them in a syslog. ELS filters specify the MFA event types that are eligible to be pulled. The ELS application is installed on your servers and is a component of the SurePassID Local Agent.
The following MFA event types can be synchronized to a syslog:
- Action Required
The Event Log Sync Application uses https for transport security by default. If more security is needed, PKI and X.509 certificates can be used.