Counter for authentication attempts

Counts the number of authentication attempts for the named application, categorized by status of the response.

Table 1. fourjs_gip_authentication_count
Labels Value Purpose
  1. application: Name of the application trying to authenticate; for example, "ConsoleApp" or "DeploymentApp"
  2. status: The status label may be one of the following values shown in the table below.
    Value Description
    ok Authentication successful
    invalid_credentials Username/password not recognized; prompts to retry
    access_forbidden Too many failed attempts; access denied
    denied Authenticated but insufficient permissions
    error Unexpected error; user rejected (see logs)
Number of authentication attempts depending on the status
  • Detect the number of users trying to authenticate
  • May raise an alert if there are too many attempts with access_forbidden, invalid_credentials, or error

This metric is set by default in the GAS and can be disabled through the BDL Prometheus API by setting prometheus.enabled=false in the fglprofile.

Metric examples
# HELP fjs_gip_authentication Number of authentication attempts per application
# TYPE fjs_gip_authentication counter
fourjs_gip_authentication_count{application="ConsoleApp",status="invalid_credentials"} 2
fourjs_gip_authentication_count{application="ConsoleApp",status="access_forbidden"} 1
fourjs_gip_authentication_count{application="ConsoleApp",status="ok"} 3
fourjs_gip_authentication_count{application="ConsoleApp",status="denied"} 2
fourjs_gip_authentication_count{application="DeploymentApp",status="ok"} 1