OpenID Connect Service Provider metrics

Metrics supported in the OpenID Connect Service Provider

Counter for delegation requests

Table 1. fourjs_oidc_request_count
Labels Value Purpose
  1. request: The request label may be one of the following values shown in the table.
    Value Description
    delegate Request for login or logout
    auto_logout Request for relogin when auto logout set via GAS
    callback Request for log in
  2. operation: The operation label may be one of the following values shown in the table below.
    Value Description
    login Request for login
    logout Request for logout
    prompt Relogin request when set via GAS PROMPT configuration
  3. url: URL of the application requesting OpenID Connect login/logout workflow
  4. status: The status label may be one of the following values shown in the table below.
    Value Description
    ok Request successfully processed
    error Unexpected error — invalid protocol. Check logs for details.
    denied Access to the application denied — insufficient permissions.
Number of requests
  • Count number of logged users, logged out users, or relogin attempts
  • May raise an alert if there are too many errors or denied requests

This metric is set by default in the GAS and can be disabled through the BDL Prometheus API by setting prometheus.enabled=false in the fglprofile.

Metric examples
# HELP fourjs_oidc_request_count Number of requests processed by the OIDC service provider
# TYPE fourjs_oidc_request_count counter
fourjs_oidc_request_count{request="delegate",operation="logout",status="ok"} 4
fourjs_oidc_request_count{request="auto_logout",operation="prompt",status="ok"} 4
fourjs_oidc_request_count{request="callback",operation="login",url="/ua/r/admin/ConsoleApp",status="ok"} 2
fourjs_oidc_request_count{request="delegate",operation="login",url="/ua/r/admin/ConsoleApp",status="ok"} 3
fourjs_oidc_request_count{request="callback",operation="login",url="/ua/r/CalculatorClient",status="ok"} 2
fourjs_oidc_request_count{request="delegate",operation="login",url="/ua/r/CalculatorClient",status="ok"} 2
fourjs_oidc_request_count{request="callback",operation="login",url="/ua/resume/",status="ok"} 3
fourjs_oidc_request_count{request="delegate",operation="login",url="/ua/resume/",status="ok"} 3