💻Devices Tab
Last updated
Last updated
Within the User 360 profile, the Devices tab provides context on authentication and/or access devices associated with each user. Similar to the Networks tab, the Devices tab can be useful context on a user, or the person impersonating a user, during an incident or investigation into anomalous activity. Additionally, it is a great way to see information into devices that are no longer in use and can be cleaned up. The Devices tab is the fourth tab of the User 360. This article will detail the different information and functionality available on the Devices tab.
The Devices table contains detailed information for 3 different device types:
Access and Authentication Devices
Access devices
Authentication devices
Individual devices are grouped by Device type in the table. If there are no devices of a particular type associated with a given user, that device type will not appear in the table.
Above the column headers on the left, you can see the total number of devices associated with a given user.
The section below details the fields that appear in the table, as well as the definition of each field:
Device
The device name. If available, model and serial number are also displayed in this column under the device name
Source
The identity source associated with a particular device
OS
The operating system and version of a particular device
Managed
Registered
Usage Count
The total number of times a given user has used a particular device
Enrolled (UTC)
The date and time that a particular device was enrolled as an authentication device
Last Seen (UTC)
The date and time of the last login attempt made with a particular device, regardless of outcome
Last Sync (UTC)
The date and time a particular device was last synced to the identity source
Like in the Activity or Networks table, clicking on the blank space in a given row will show you more information on a particular device
This will open a slide panel from the right side of the page, that has 6 tabs:
Overview shows you more detailed information and context about a particular device
Activity shows the activity log for all events that originated from a particular device for a given user
IPs shows detailed information for all the IP addresses associated with the activity from a particular device for a given user
Applications shows detailed information for all the applications accessed from a particular device by a given user
Factors shows detailed information on the factors associated with a particular Authentication device for a given user
Raw Data shows the raw data for a particular device
To close the slide panel, click the in the top right corner, or click anywhere outside of slide panel.
The Devices table offers multiple high level features that are similar to what can be found elsewhere in the platform. Click through the tabs below to learn more about how to utilize each feature.
View Activity
Click the 3-dot button to the right of the last column, to find the View Activity action. This will take you to the user's Activity tab, pre-filtered on the Device ID, so that you can see all of the activity/events associated with a particular device for a given user.
= Device is managed by organization, based on data collected from identity source = Device is managed by organization, based on data collected from identity source
= Device is registered, based on data collected from identity source = Device is not registered, based on data collected from identity source
