Audit Logs
Permiso keeps a log of authentication events so you have a clear picture of who logged in, when, from where, and what they accessed. This is useful for security reviews, compliance requirements, and investigating unusual activity.
Viewing audit logs
There are two views of the audit log:
- Your own activity: go to Settings → Audit Log to see your personal login history
- All users’ activity: admins can go to Settings → Audit Log → All Users to see the full log across the instance
What gets logged
Every authentication-related action creates an audit log entry:
| Event | When it happens |
|---|---|
| Sign In | A user successfully logs in with a passkey |
| One-time Login | A user logs in with a login code instead of a passkey |
| Account Created | A new user completes sign-up |
| New Client Authorization | A user grants an application access for the first time |
| Client Authorization | A user signs in to an application they’d already authorised |
| New Device Code Authorization | A user authorises a device for the first time |
| Device Code Authorization | A user authorises a device they’d already approved |
| Passkey Added | A user registers a new passkey |
| Passkey Removed | A user or admin removes a passkey |
First-time authorisations are logged as separate event types from repeat ones, so you can filter for the moment someone first gained access to an application rather than wading through every subsequent sign-in.
Each entry includes the user’s IP address and browser/device information.
Filtering and searching
You can filter the log by:
- User: show activity for a specific person
- Event type: show only sign-ins, or only passkey changes, etc.
- Date range: narrow down to a specific time window
Retention
Audit log entries are kept for 50 days by default. If your organisation needs a longer retention period for audit logs, contact us about the options.
Entries older than the retention period are automatically deleted.