I would find it very helpful to include (add) the following fields for
authentication events to both the Authentication Activity Monitor and
App logging (SIEM etc.) If an ALIAS was used for authenticationInclude
what User Group(s) was leveraged to au...
