export-change-logs-with-a-history-of-administration-operations-9d96aae.md

Export Change Logs with a History of Administration Operations

You can download a CSV file with a history of the operations performed by administrators in the administration console for SAP Cloud Identity Services.

Context

The exported change logs are saved in a CSV file and contain information about CREATE, UPDATE, or DELETE operations performed by administrators. The change logs are stored in the data base for 24 months.

Each record should contain the following data:

• Date

  The date when the resource was created, updated, or deleted.

• Administrator's ID

  The ID of the user or the system that made the change.

• Administrator's Name

  The name of the user or the system that made the change.

• Resource Type

  This indicates which type of resource was created, updated, or deleted, for example service provider.

• Resource ID

  An identifier for the resource.

• Resource Name

  The name of the resource that was created, updated, or deleted.

• Action

  • CREATE

    The log shows the value of the attribute when the resource was created.

  • UPDATE

    The log shows the changed value of the attribute when the resource was updated.

  • DELETE

    The log shows which resource was deleted.

• Attribute

  The attribute of the resource that was created or updated with the relevant operation.

• Value

  The new value of the attribute.

  Note:

  There are attributes whose values cannot be displayed in the logs. In such cases the value fields are left blank.

Example:

The table shows change logs for the following operations:

1. A tenant administrator, Donna Moore, creates a Company A application.
2. The tenant administrator uploads service provider metadata for the SAML 2.0 trust.
3. The tenant administrator creates custom Company A terms of use by uploading a plain text file.
4. The tenant administrator creates a custom Company A privacy policy by uploading a plain text file.
5. The tenant administrator allows user self-registration for an application of the configured service provider as she uses the default email template for the self-registration process.
6. The tenant administrator configures a branding style for the application.
7. The tenant administrator sets SAP Community Password Policy v.1.1 for the application .
8. The tenant administrator sets Company A Terms of Use for the application.
9. The tenant administrator sets Company A Privacy Policy for the application.

Sample Change Logs Data

Date	Administrator's ID	Administrator's Name	Resource Type	Resource ID	Resource Name	Action	Attribute	Value
16-05-2014 10:21:21	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	sp.example.com	UPDATE	Privacy Policy	Company A Privacy Policy
16-05-2014 10:21:15	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	sp.example.com	UPDATE	Terms of Use	Company A Terms of Use
16-05-2014 10:21:08	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	sp.example.com	UPDATE	Password Policy	https://accounts.sap.com/policy/passwords/sap/web/1.1
16-05-2014 10:20:18	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	sp.example.com	UPDATE	Branding Style	Text Color=#ffffff, Background Top Color=#E3E3E3, Border Color=#7B9EB3, show_header=false, Background Bottom Color=#E3E3E3
16-05-2014 10:15:10	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	sp.example.com	UPDATE	Branding Type	Custom Theme
16-05-2014 10:14:29	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	sp.example.com	UPDATE	Self-Registration	Allowed
16-05-2014 10:06:24	P123456	Donna Moore	Privacy Policy Document	53da05f9e4b0732235f24b8e	English Version of Company A Privacy Policy	CREATE	Plain Text Privacy Policy File
16-05-2014 10:05:11	P123456	Donna Moore	Privacy Policy Document	53da05f9e4b0732235f24b8a	Company A Privacy Policy	CREATE	Display Name	Company A Privacy Policy
16-05-2014 10:03:18	P123456	Donna Moore	Terms of Use Document	53da0595e4b0732235f24b04	English Version of Company A Terms of Use	CREATE	Plain Text Terms of Use File
16-05-2014 10:02:21	P123456	Donna Moore	Terms of Use Document	53da0595e4b0732235f24b00	Company A Terms of Use	CREATE	Display Name	Company A Terms of Use
15-05-2014 11:32:18	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	Company A (company_a_service_provider)	UPDATE	SAML 2.0 Provider Name	company_a_service_provider
15-05-2014 11:32:18	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	Company A (company_a_service_provider)	UPDATE	Authenticating Authority	company_a_tenant_id
15-05-2014 11:32:18	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	Company A (company_a_service_provider)	UPDATE	Assertion Consumer Service Endpoint	service_provider_acs_endpoint, HTTP-POST
15-05-2014 11:32:18	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	Company A (company_a_service_provider)	UPDATE	Single Logout Endpoint	service_provider_slo_endpoint, HTTP-POST
15-05-2014 11:32:18	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	Company A (company_a_service_provider)	UPDATE	Single Logout Endpoint	service_provider_slo_endpoint, HTTP-Redirect
15-05-2014 11:31:11	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	Company A (company_a_service_provider)	CREATE	Name ID Attribute	User ID
15-05-2014 11:31:11	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	Company A (company_a_service_provider)	CREATE	Default Name ID Format	urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified
15-05-2014 11:31:11	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	Company A (company_a_service_provider)	CREATE	Self-Registration	Inherit
15-05-2014 11:31:11	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	Company A (company_a_service_provider)	CREATE	Certificate	CN=sp.example.com
15-05-2014 11:31:11	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	Company A (company_a_service_provider)	CREATE	Assertion Consumer Service Endpoint
15-05-2014 11:31:11	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	Company A (company_a_service_provider)	CREATE	Single Logout Endpoint
15-05-2014 11:31:11	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	Company A (company_a_service_provider)	CREATE	User Attribute
15-05-2014 11:31:11	P123456	Donna Moore	Service Provider	500964f6e4b0f3cba101f700	Company A (company_a_service_provider)	CREATE	Constant Attribute

To download a CSV file with change logs information, proceed as follows:

Procedure

1. Sign in to the administration console for SAP Cloud Identity Services.

2. Choose the Audit and Change Logs tile.

3. Under Export Change Logs choose the Export button.

Results

You have downloaded a CSV file containing history of operations for the tenant administration, and for the configurations of identity providers and service providers.