How to detect login from new device. #45095

mishary9 · 2025-12-29T22:14:05Z

mishary9
Dec 29, 2025

Hi all, does anyone know how to distinguish between a "New Device" and an "Existing Device" login using Keycloak events?

I know there isn't a native Admin endpoint to fetch user devices (referenced in discussion #26959 ), but I’m specifically stuck on the LOGIN event itself. The payload provides the ipAddress and code_id, but nothing that flags the session as new or existing.

i have some idea which is when we receive the login event we fetch the user's sessions
if more than 1 and the one of them have the start time as before 1 hour then mark this as a new device and then we can simply do st like publishing an event login from new device to notify the user, and we can relay on the suggested way to fetch the devices information using the [userid] to attach the device info in the event.

Has anyone implemented logic to check this event against previous user sessions successfully?

mishary9 · 2025-12-29T22:15:52Z

mishary9
Dec 29, 2025
Author

`login event : 

`{
	"type": "LOGIN",
	"realmId": "86ad2641-3970-430d-89ae-aab610b70519",
	"id": "e28bb8db-9e3c-4cf4-90d9-2221c0f4c9f7",
	"time": 1767044425524,
	"clientId": "account-console",
	"userId": "9e496b3b-59e2-406a-bf1c-6846b7b6bdc6",
	"ipAddress": "192.1.1.1",
	"details": {
		"auth_method": "openid-connect",
		"auth_type": "code",
		"redirect_uri": "http://localhost:8080/realms/localhost/account/account-security/device-activity",
		"consent": "no_consent_required",
		"code_id": "69ae7316-de98-11d5-2a7f-a85eb567ebe9",
		"username": "meeeeeesh",
		"email": "test@gmail.com",
		"firstName": "me",
		"lastName": "also me"
	}
}``


https://my-domain.com/auth/admin/realms/demo/users/{{sub}}/sessions
[
  {
    "id": "2d735372-1a5a-43de-8a6c-1a45deebf20b",
    "username": "meeeeeesh",
    "userId": "9e496b3b-59e2-406a-bf1c-6846b7b6bdc6",
    "ipAddress": "192.1.1.1",
    "start": 176704442450,
    "lastAccess": 176704442450,
    "clients": {
      "4eb676c2-94c3-4bac-a423-94a7bf57ece0": "test"
    }
  }
]

0 replies

Navigation Menu

Repository navigation

How to detect login from new device. #45095

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

8000 {{editor}}'s edit

Uh oh!

Select a reply

Uh oh!

How to detect login from new device. #45095

Uh oh!

Uh oh!

mishary9 Dec 29, 2025

Replies: 1 comment

Uh oh!

Uh oh!

mishary9 Dec 29, 2025 Author

mishary9
Dec 29, 2025

mishary9
Dec 29, 2025
Author