I'm looking for insights on how to observe authentication in production environments. We have great observability for our APIs, infrastructure, and metrics on things like latency and errors, but authentication seems to stand apart. Do teams usually incorporate login processes into their observability stack with metrics, alerts, and service level objectives, or do they rely mainly on logs and manual debugging? I'm really curious about what practices others find successful.
1 Answer
Our development teams connect their authentication metrics to our overall observability tools just like the rest of their stack. As a DevOps engineer, I don't follow the same protocol for the internal tools I develop for our team, so I handle my projects differently. For me, logging and ad-hoc checks have worked well to ensure authentication stability, and since our setup is pretty robust, I mainly just set it up and leave it.

Thanks for sharing! Which observability tools are you currently using, and is your authentication system in-house or a third-party solution?