User Login
Sent when a user logs in to an organization.
General Information
Event ID: vdc.org_v0.login_v0
Event message details: Sent with data.login.status set to SUCCESS.
Severity: Info. High when the identity provider subject of the user does not match the stored one. The login is still allowed, and the event carries triage details.
Workloads: Control Plane
Parameters
|
Parameter Name |
Description |
Example |
|---|---|---|
|
specversion |
Event schema version. |
ev20260814 |
|
source |
System that sent the event. Possible values: |
CONTROLPLANE |
|
timestamp |
Time when the event happened, in RFC3339Nano format and the UTC time zone. |
2026-08-04T09:18:42Z |
|
type |
Event ID. |
vdc.org_v0.login_v0 |
|
severity |
Event severity. Possible values: |
INFO |
|
visibility |
Intended visibility scope of the event. Only events with the |
CUSTOMER_ACCESSIBLE |
|
category |
Event category. Possible values: |
LOGIN |
|
actor.identifier |
Actor identifier. |
alice@bob.networking |
|
actor.kind |
Actor type that triggered the event. Possible values: |
user |
|
organizationReference.organizationId |
ID of the Veeam Data Cloud organization. |
org_12345 |
|
orgId |
ID of the Veeam Data Cloud organization that the event belongs to. Resolved during event processing, so it is present even when the event references only a workload tenant. |
org_12345 |
|
triage.code |
Fault type. Present only when the event reports a fault. Possible values: |
CLIENT_UNAUTHORIZED |
|
triage.message |
Fault details. Present only when the event reports a fault. |
stored idp subject differs from the token subject; possible email re-assignment — the stored subject was preserved and the login was allowed |
|
data.login.status |
Outcome of the login attempt. Possible values: SUCCESS, FAILED. |
SUCCESS |
|
data.org.id |
ID of the Veeam Data Cloud organization. |
org_12345 |
|
data.org.name |
Name of the Veeam Data Cloud organization. |
Alice and Bob's Networking |
Event Example
User Login
|
{ "specversion": "ev20260814", "source": "CONTROLPLANE", "timestamp": "2026-08-04T09:18:42Z", "type": "vdc.org_v0.login_v0", "severity": "INFO", "visibility": "CUSTOMER_ACCESSIBLE", "category": "LOGIN", "actor": { "identifier": "alice@bob.networking", "kind": "user" }, "organizationReference": { "organizationId": "org_12345" }, "orgId": "org_12345", "data": { "login": { "status": "SUCCESS" }, "org": { "id": "org_12345", "name": "Alice and Bob's Networking" } } } |
User Login with Identity Provider Subject Conflict
|
{ "specversion": "ev20260814", "source": "CONTROLPLANE", "timestamp": "2026-08-04T09:20:05Z", "type": "vdc.org_v0.login_v0", "severity": "HIGH", "visibility": "CUSTOMER_ACCESSIBLE", "category": "LOGIN", "actor": { "identifier": "alice@bob.networking", "kind": "user" }, "organizationReference": { "organizationId": "org_12345" }, "orgId": "org_12345", "triage": { "code": "CLIENT_UNAUTHORIZED", "message": "stored idp subject differs from the token subject; possible email re-assignment — the stored subject was preserved and the login was allowed" }, "data": { "login": { "status": "SUCCESS" }, "org": { "id": "org_12345", "name": "Alice and Bob's Networking" } } } |