From 197c284e489b53d4f44f57e5595cd118859440b3 Mon Sep 17 00:00:00 2001
From: davida marion <davida.marion@gsa.gov>
Date: Wed, 27 Nov 2024 11:30:25 -0500
Subject: [PATCH 1/2] Update report to use earlier event

---
 lib/reporting/protocols_report.rb | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/reporting/protocols_report.rb b/lib/reporting/protocols_report.rb
index fe1d333961a..560d7da79d7 100644
--- a/lib/reporting/protocols_report.rb
+++ b/lib/reporting/protocols_report.rb
@@ -17,6 +17,7 @@ class ProtocolsReport
     attr_reader :time_range
 
     SAML_AUTH_EVENT = 'SAML Auth'
+    SAML_AUTH_REQUEST_EVENT = 'SAML Auth Request'
     OIDC_AUTH_EVENT = 'OpenID Connect: authorization request'
 
     # @param [Range<Time>] time_range
@@ -352,7 +353,7 @@ def protocol_query
 
     def saml_signature_query
       params = {
-        events: quote([SAML_AUTH_EVENT]),
+        events: quote([SAML_AUTH_REQUEST_EVENT]),
       }
 
       format(<<~QUERY, params)
@@ -362,7 +363,6 @@ def saml_signature_query
           properties.event_properties.request_signed != 1 AS not_signed,
           isempty(properties.event_properties.matching_cert_serial) AND signed AS invalid_signature
         | filter name IN %{events}
-          AND properties.event_properties.success = 1
         | stats
           sum(not_signed) AS unsigned_count,
           sum(invalid_signature) AS invalid_signature_count

From 8db93458cb1291e426759805b0ed0af99edceba3 Mon Sep 17 00:00:00 2001
From: davida marion <davida.marion@gsa.gov>
Date: Fri, 29 Nov 2024 08:39:47 -0500
Subject: [PATCH 2/2] changelog: Internal, Analytics, Update signature query to
 use more accurate event