Using Keystroke to User Behavior Analytics

keystroke is used to understand the behavior of users on the kron pam login screen and is used when only mfa is enabled for the user group working mechanism keystroke will become disabled if mfa users do not log in to the login screen within a certain day this number of days can be defined by parameter the user's username and password keyboard typing speeds and accuracy will be checked and measured with a threshold value if the user does not exceed the threshold value, they will log in without the need for mfa to enable keystroke navigate to administration > multi factor authentication > user group management click on the options button click the enable otp for user group when the enable otp button is clicked, the enable keystroke button will become active click the enable keystroke button keystrokes can be defined on the existing kron pam server or externally for this, the following parameters must be defined in system config manager parameter name description sample parameter value keystroke last login success before days if the user doesn't have any mfa authentication login(login success with the token) last n days, keystroke prediction is not enabled default value 15 keystroke api url keystroke server api url https //1 1 1 1 5000/predict keystroke username threshold username prediction success threshold the prediction distance must be under the threshold default value 0 5