{ "id": "evt-7c2a", "tenantId": "tenant-9f2a", "userId": "b29c4d7c-3a8e-4d52-8b9c-1f9d2e0a2c3b", "severity": "Info", "eventType": "User Login", "message": "User jane@example.com signed in via SAML SSO", "ip": "203.0.113.45", "userAgent": "Mozilla/5.0", "createdAt": "2026-05-22T10:15:00Z" }