Skip to main content
Audit logs record the changes in your organization: issued and changed credentials, design and group changes, team and permission changes, and other important events.
Audit logs are on the Premium and Enterprise plans. Only administrators can see them.

​
Turn on audit logs

Go to Add integration, open Security Audit Logs, and install it.
The Security Audit Logs extension page

​
Read the logs

Go to Settings → Audit Logs.
The Audit logs page with activities, areas, results and times
Each row shows the activity, the area (such as Credential or Design), the result and the time. Search for people, actions and details, and filter by date, area and person.

​
Single sign-on rows

With single sign-on, the area Single Sign-On shows:
  • Changes to the connection, the domains, and turning SSO and enforcement on or off.
  • Test sign-ins that passed or failed.
  • Each SSO sign-in, and whether it came from the sign-in page or from the provider’s tile.
  • Refused SSO sign-ins, with the reason, such as Not invited or Email not on a verified domain. Their result is Failed.
  • Invitations accepted by SSO, and accounts linked to your provider.
  • Each use of owner emergency access.
  • New certificates that Hyperstack picked up from your metadata URL, and domains that lost their DNS record for 7 days.
Rows that Hyperstack writes itself, such as a daily domain check, show Hyperstack. Changes by our support team show Hyperstack support.
Actions made through the API and by AI assistants are in the audit logs too.
Last modified on November 6, 2026