> For the complete documentation index, see [llms.txt](https://ztrust.gitbook.io/ztrust-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ztrust.gitbook.io/ztrust-documentation/user-manual-ztrust-v4.1/4.-admin-manual/4.29-event-type.md). # 4.29 Event Type

Event Type	Description
AUTHREQID_TO_TOKEN	It's an administrative event query that retrieves an item.
CLIENT_DELETE	This event is activated when a client's configuration is removed from the realm.
CLIENT_INFO	This event takes place when a request for client information is made.
CLIENT_INITIATED_ACCOUNT_LINKING	It's initiated when a client starts linking an external account.
CLIENT_LOGIN	It is triggered when a client logs in successfully.
CLIENT_REGISTER	It occurs when a new client is added to the realm.
CLIENT_UPDATE	It happens when a client's settings are modified.
CODE_TO_TOKEN	It occurs when an authorization code is converted into an access token in the OAuth2 process.
CUSTOM_REQUIRED_ACTION	It is triggered by custom actions specified by the administrator.
DELETE_ACCOUNT	It occurs when a user removes their own account.
EXECUTE_ACTIONS	It is triggered when specific actions (like verifying an email) are performed for a user.
EXECUTE_ACTION_TOKEN	It happens when an action token (such as for password reset) is used.
FEDERATED_IDENTITY_LINK	It occurs when a federated identity is attached to a Keycloak account.
GRANT_CONSENT	It occurs when a user provides consent to a client.
IDNETITY_PROVIDER_FIRST_LOGIN	It occurs when a user logs in for the first time using an identity provider.
IDENTITY_PROVIDER_LINK_ACCOUNT	It happens when a user connects their account with an identity provider.
IDENTITY_PROVIDER_LOGIN	It is triggered when a user logs in via an identity provider.
IDENTITY_PROVIDER_POST_LOGIN	It occurs following a successful login with an identity provider.
IDENTITY_PROVIDER_RESPONSE	It occurs when a response is received from an identity provider.
IDNETITY_PROVIDER_RETRIEVE_TOKEN	It occurs when a token is obtained from an identity provider.
IMPERSONATE	It is triggered when an administrator impersonates a user.
INTROSPECT_TOKEN	It is triggered when a request is made to inspect a token.
INVALID_SIGNATURE	It occurs when a token or request has an invalid signature.
LOGIN	It happens when a user logs in successfully.
LOGOUT	It happens when a user logs out.
OAUTH2_DEVICE_AUTH	It is triggered during the OAuth2 device authorization process.
OAUTH2_DEVICE_CODE_TO_TOKEN	It happens when a device code is exchanged for a token.
OAUTH2_DEVICE_VERIFY_USER_CODE	It happens when a user code is confirmed in the OAuth2 device flow.
PERMISSION_TOKEN	It occurs when a permission token is created.
PUSHED_AUTHORIZATION_REQUEST	It happens when an authorization request is pushed to the server.
REFRESH_TOKEN	It occurs when a refresh token is used to get a new access token.
REGISTER	It occurs when a new user account is created.
REGISTER_NODE	It is triggered when a new cluster node is added.
REMOVE_FEDERATED_IDENTITY	It occurs when a federated identity is unlinked from a user account.
REMOVE_TOTP	It occurs when a user removes their TOTP configuration.
RESET_PASSWORD	It occurs when a user starts the password reset process.
RESTART_AUTHENTICATION	It is triggered when the authentication flow is restarted.
REVOKE_GRANT	It occurs when a user's consent to a client is revoked.
SEND_IDENTITY_PROVIDER_LINK	It occurs when a link is sent to connect an identity provider account.
SEND_RESET_PASSWORD	It occurs when a password reset email is sent.
SEND_VERIFY_EMAIL	It occurs when an email verification link is sent.
TOKEN_EXCHANGE	It occurs when tokens are exchanged via the token exchange endpoint.
UNREGISTER_CODE	It occurs when an OAuth2 device code is unregistered.
UPDATE_CONSENT	It occurs when a user's consent is modified.
UPDATE_EMAIL	It occurs when a user changes their email address.
UPDATE_PASSWORD	It occurs when a user updates their password.
UPDATE_PROFILE	It occurs when a user updates their profile details.
UPDATE_TOTP	It occurs when a user updates their TOTP settings.
USER_INFO_REQUEST	It occurs when a request is made to the user info endpoint.
VALIDATE_ACCESS_TOKEN	It occurs when an access token is validated.
VERIFY_EMAIL	It occurs when a user confirms their email address.
VERIFY_PROFILE	It occurs when a user verifies their profile information.

All the events listed above have corresponding error events as mentioned below

Event Type	Description
AUTHREQID_TO_TOKEN_ERROR	It happens when there's a problem exchanging an auth_req_id for a token in the OAuth2 Device Authorization Grant flow.
CLIENT_DELETE_ERROR	It occurs when there's a problem deleting a client's configuration.
CLIENT_INFO_ERROR	It happens when an error arises while requesting client information.
CLIENT_INITIATED_ACCOUNT_LINKING_ERROR	It is triggered when there's an issue with linking an external account initiated by a client.
CLIENT_LOGIN_ERROR	It is fired when there's an error during a client's login attempt.
CLIENT_REGISTER_ERROR	It is triggered when an error occurs during the registration process of a new client.
CLIENT_UPDATE_ERROR	It occurs when there's an error updating a client's configuration.
CODE_TO_TOKEN_ERROR	It happens when there's a problem exchanging an authorization code for an access token.
CUSTOM_REQUIRED_ACTION_ERROR	It is triggered by errors in executing custom required actions set by the administrator.
DELETE_ACCOUNT_ERROR	It occurs when there's an error deleting a user's account.
EXECUTE_ACTIONS_ERROR	It occurs when there's an error executing actions for a user.
EXECUTE_ACTION_TOKEN_ERROR	It is triggered when there's an error executing an action token.
FEDERATED_IDENTITY_LINK_ERROR	It occurs when there's an error linking a federated identity to a Keycloak account.
GRANT_CONSENT_ERROR	It happens when there's an error while granting consent to a client.
IDNETITY_PROVIDER_FIRST_LOGIN_ERROR	It occurs when there's an error during a user's first login using an identity provider.
IDENTITY_PROVIDER_LINK_ACCOUNT_ERROR	It is triggered when there's an error linking an account with an identity provider.
IDENTITY_PROVIDER_LOGIN_ERROR	It occurs when there's an error during login using an identity provider.
IDENTITY_PROVIDER_POST_LOGIN_ERROR	It occurs when there's an error after a successful identity provider login.
IDENTITY_PROVIDER_RESPONSE_ERROR	It occurs when there's an error processing the response from an identity provider.
IDNETITY_PROVIDER_RETRIEVE_TOKEN_ERROR	It occurs when there's an error retrieving a token from an identity provider.
IMPERSONATE_ERROR	It is triggered when there's an error during admin impersonation of a user.
INTROSPECT_TOKEN_ERROR	It occurs when there's an error during a token introspection request.
INVALID_SIGNATURE_ERROR	It occurs when a token or request has an invalid signature.
LOGIN_ERROR	It occurs when there's an error during a user's login attempt.
LOGOUT_ERROR	It occurs when there's an error during a user's logout attempt.
OAUTH2_DEVICE_AUTH_ERROR	It is triggered during an error in the OAuth2 device authorization flow.
OAUTH2_DEVICE_CODE_TO_TOKEN_ERROR	It occurs when there's an error exchanging a device code for a token.
OAUTH2_DEVICE_VERIFY_USER_CODE_ERROR	It occurs when there's an error verifying a user code in the OAuth2 device flow.
PERMISSION_TOKEN_ERROR	It occurs when there's an error issuing a permission token.
PUSHED_AUTHORIZATION_REQUEST_ERROR	It occurs when there's an error in the pushed authorization request process.
REFRESH_TOKEN_ERROR	It occurs when there's an error using a refresh token to obtain a new access token.
REGISTER_ERROR	It occurs when there's an error during user registration.
REGISTER_NODE_ERROR	It is triggered when there's an error registering a new cluster node.
REMOVE_FEDERATED_IDENTITY_ERROR	It occurs when there's an error removing a federated identity from a user account.
REMOVE_TOTP_ERROR	It happens when there's an error removing a user's TOTP configuration.
RESET_PASSWORD_ERROR	It happens when there's an error during the password reset process.
RESTART_AUTHENTICATION_ERROR	It occurs when there's an error restarting the authentication flow.
REVOKE_GRANT_ERROR	It happens when there's an error revoking a user's consent grant.
SEND_IDENTITY_PROVIDER_LINK_ERROR	It occurs when there's an error sending a link to connect an identity provider account.
SEND_RESET_PASSWORD_ERROR	It happens when there's an error sending a reset password email to a user.
SEND_VERIFY_EMAIL_ERROR	It occurs when there's an error sending an email verification link to a user.
TOKEN_EXCHANGE_ERROR	It occurs when there's an error during the token exchange process.
UNREGISTER_CODE_ERROR	It happens when there's an error unregistering an OAuth2 device code.
UPDATE_CONSENT_ERROR	It occurs when there's an error updating a user's consent.
UPDATE_EMAIL_ERROR	It happens when there's an error updating a user's email address.
UPDATE_PASSWORD_ERROR	It occurs when there's an error updating a user's password.
UPDATE_PROFILE_ERROR	It occurs when there's an error updating a user's profile information.
UPDATE_TOTP_ERROR	It occurs when there's an error updating a user's TOTP configuration.
USER_INFO_REQUEST_ERROR	It occurs when there's an error making a request to the user info endpoint.
VALIDATE_ACCESS_TOKEN_ERROR	It happens when there's an error validating an access token.
VERIFY_EMAIL_ERROR	It happens when there's an error during the email verification process.
VERIFY_PROFILE_ERROR	It happens when there's an error during the profile verification process.