Every authentication action is recorded: logins, failed attempts, registrations, password resets, MFA changes, session revocations. Query the audit log via the admin UI or programmatically.
Detailed guide coming soon.