Introduction
DigipassONE Insights for Authenticate is an add-on product that uses data from your DigipassONE Authenticate service to provide detailed reports on key performance indicators (KPIs).
DigipassONE Insights then uses these reports to suggest improvements for your authentication strategy that optimize the authentication performance. In this way, you can assess the effectiveness of your authentication strategy and demonstrate value to stakeholders.
DigipassONE Insights is a Splunk app, deployed on the Splunk Cloud Platform, that uses audit logs to create detailed reports that compare KPIs with the industry benchmarks1 to provide suggestions for improvement.
Prerequisites
You are a DigipassONE Authenticate service customer.
Your organization has purchased the DigipassONE Insights add-on product.
You have a mobile or web app that uses one of the DigipassONE App SDKs.
The App SDK you are using has Metrics enabled. Metrics are enabled by default in the DigipassONE Android, iOS and Web App SDKs.
1 DigipassONE Insights uses the industry standard reported by the FIDO Alliance of 8.5 seconds per sign-in with passkeys, as compared to 31 seconds per sign-in with traditional MFA.
Dashboards
DigipassONE Insights include the following dashboards:
Executive Dashboard. Displays a high level overview.
Admin Dashboard. Displays high level information in various visualizations. Some metrics can be drilled down to show more detailed data or analytics.
Operation Counts Over Time by Device. Displays authentication activity trends over time, including sign-in and registration counts according to device type, model, and operating system.
Operation Distribution by Device. Displays authentication distribution analytics by device type, device model, and operating system for a specified authenticator type and time period.
Errors Dashboard. Displays error details such as device type, model, and OS, as well as operation and status codes.
Executive dashboard
The Executive Dashboard displays visualizations for:
Metric | Description |
|---|---|
Estimated Active User Count | Estimated number of unique users who have performed at least one successful authentication. |
Total Sign-ins | Total number of successful authentications. |
Total Registrations | Total number of successful registrations. |
Time Period | Drop-down list to specify the time period displayed in the dashboard:
|
Authenticator Type | Drop-down list to specify the authenticator type displayed in the dashboard:
|
Utilization Rate | Percentage of all attempted authentications using the specified authenticator type during the specified time period. |
Sign-in Success Rate | Percentage of all successful authentications performed using the specified authenticator type during the specified time period. |
FIDO Sign-ins | Total number of successful FIDO Auth authentications performed during the selected time period. |
Cost Savings | Estimated cost savings due to passkey-based sign-ins during the selected time period.2 |
Avg FIDO Sign-in Time | Average sign-in time, in seconds during the selected time period. |
Sign-ins by Country | Number of sign-ins by country during the selected time period. |
Sign-ins by Platform | Number of sign-ins by platform (Android, iOS or browser) during the selected time period. |
Sign-ins by Applications | Number of sign-ins by application during the selected time period. |
2 Configured as $0.03 per sign-in, assuming passkeys eliminate one SMS or other authentication method at $0.03 for every sign-in.
Admin dashboard
Besides Estimated Active User Count, Total Sign-ins, Total Registrations, Time Period, and Authenticator Type which can also be found in the Executive dashboard, the Admin Dashboard also displays visualizations for:
Metric | Description | Drills down to |
|---|---|---|
Estimated Active User Count | Estimated number of unique users who have performed at least one successful authentication. | n/a |
Registrations | Number of successful registrations using the specified authenticator type during the specified time period. | |
Registration Rate | Percentage of successful registrations that were attempted using the specified authenticator type during the specified time period. | n/a |
Sign-ins | Number of successful authentications using the specified authenticator type during the specified time period. | |
Sign-in Success Rate | Percentage of successful authentications performed using the selected authenticator type. | n/a |
Utilization Rate | Percentage of authentications attempted using the selected authenticator type. | Utilization Rate by Authentication Method and Authenticator Type |
Avg-FIDO Sign-in Time | Average FIDO sign-in time using the specified authenticator type during the specified time period. | FIDO Sign-in Time Details, which includes:
|
Deregistrations | Number of FIDO and non-FIDO deregistrations during the selected time period. | n/a |
Drill-down dashboards
More in-depth information can be found by drilling down into the following dashboards from the Admin dashboard:
Utilization rate by authentication method and authenticator type
Shows the percentage breakdown of authentication attempts by authenticator method and type for the selected time period.
Operation counts over time by device
Interactive charts showing the number of sign-ins and registrations according to device type, model and OS over the selected time period.3
Operation distribution by device
Shows the percentage breakdown of sign-ins and registrations according to device type, model, OS, and authenticator type over the selected time period.3
Fido sign-in time details
Detailed breakdown of FIDO sign-in time for the selected authenticator type and time period. Shows how sign-in time is distributed through each step of the authentication flow and how it compares to industry benchmarks. Includes:
Sign-in Time Breakdown
Provides a Detailed breakdown of sign-in time into:
Get Auth Request
Send Auth Response
User Interaction Time
Non-User Interaction Time
during the selected time period.
Also shows an overlay of Industry Average Sign-in time, and flags if any section of the overall sign-in time exceeds industry benchmarks. Drills down into the Potential Root Causes.
Sign-in time histogram
Shows the number of sign-ins across a range of sign-in times in seconds.
Potential Root Causes
Accessed by clicking on the Sign-in Time Breakdown chart in the Fido sign-in time details dashboard, the Potential Root Causes dashboard breaks down the Fido sign-in time into the following components:
Get Auth Request
User Interaction Time
Non-User Interaction Time
Send Auth Response
Network Time
and compares each to its own threshold. For any component exceeding its preset limits, a list of potential root causes will be shown to help diagnose the likely source of the delay.
3This dashboard can also be accessed from the top level menu.
Errors dashboard
Counts the errors that are visible to the DigipassONE Authenticate Server. These error counts are displayed over time, according to:
device type
device model
device OS
operation: sign-in and registration
status code
Clicking on one of the bars in the Errors By Device Type chart will drill down to the Error Details Dashboard.
Error details dashboard
Displays the percentage breakdown of error codes encountered across all authentication attempts for the selected time period.